Authenticated code execution via freed-memory reuse

Use-after-free in Microsoft Windows Remote Desktop Services allows remote authenticated users to execute code over a network. Microsoft identifies reuse of freed memory in Remote Desktop Services but does not disclose the responsible function or input sequence. A low-privilege authenticated network session is required; successful exploitation runs attacker-controlled code in the service context.