Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_cliprdr_provide_data_` passes freed `pDstData` to `XChangeProperty` because the cliprdr channel thread calls `xf_cliprdr_server_format_data_response` which converts and uses the clipboard data without holding any lock, while the X11 event thread concurrently calls `xf_cliprdr_clear_cached_data` → `HashTable_Clear` which frees the same data via `xf_cached_data_free`, triggering a heap use after free. Version 3.23.0 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-26 | 2 | Disclosure1General1 |
| 2026-02-27 | 1 | Disclosure1 |
CVE-2026-25959 FreeRDP Heap Use-After-Free Vulnerability in Clipboard Channel Prior to 3.23.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25959
Post summary
A heap use‑after‑free vulnerability in FreeRDP’s clipboard channel affecting versions prior to 3.23.0 has been disclosed.
🔴 CVE-2026-25959 - Critical FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_cliprdr_provide_data_` passes freed `pDstData` to `XChangeProperty` because the cliprdr chann... https://www.thehackerwire.com/vulnerability/CVE-2026-25959/ https://t.co/Me5N03GsZM
Post summary
The tweet announces CVE-2026-25959 as a critical use‑after‑free flaw in FreeRDP’s clipboard handling, potentially leading to memory corruption.
CVE-2026-25959 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_cliprdr_provide_data_` passes freed `pDstData` to `XChangeProperty` beca… https://www.cve.org/CVERecord?id=CVE-2026-25959
Post summary
The text references CVE‑2026‑25959, noting a freed memory issue in FreeRDP before version 3.23.0, but provides no PoC, exploit, patch, or active exploitation information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | freerdp | freerdp | - | - | - |