Key Findings Critical heap buffer overflow in FreeRDP Windows client (CVE-2026-44421) allows remote code execution when victim connects to malicious server Public proof-of-concept exploit code now available, significantly lowering attack complexity for threat actors Affects FreeRDP versions 3.28.0 and older, specifically the unmaintained wfreerdp component Related vulnerabilities CVE-2026-44422 and CVE-2026-40033 indicate systemic protocol implementation weaknesses Thousands
