Remote code execution via use-after-free race

Race condition in Microsoft Remote Desktop Client allows remote attackers to execute code after a user connects to a malicious RDP server. Concurrent client operations improperly synchronize access to a shared resource, allowing one operation to use memory after another frees it. Exploitation requires user interaction and a network connection to an attacker-controlled or compromised RDP server; successful exploitation runs attacker code in the client context.