https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T01:25:53.044060+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-125394 CVE-2026-125394 — FreeRDP before 3.33.0 Use-After-Free via Stale Brush Cache Pointer 2026-11-11T01:25:53.045700+00:00

Affected: FreeRDP

FreeRDP before 3.33.0 contains a heap use-after-free vulnerability in update_gdi_patblt(), update_gdi_polygon_cb() and update_gdi_mem3blt() that retain stale brush cache pointers. A malicious RDP server can resend CACHE_BRUSH to the same slot then send PATBLT, causing clients to read freed heap memory, disclosing data or crashing.