Document vulnerability CVE-2020-9498, fixed in 1.2.0.
diff --git a/_security/CVE-2020-9498.md b/_security/CVE-2020-9498.md
new file mode 100644
index 0000000..edbdff4
--- /dev/null
+++ b/_security/CVE-2020-9498.md
@@ -0,0 +1,15 @@
+---
+title: Dangling pointer in RDP static virtual channel handling
+cve: CVE-2020-9498
+fixed: 1.2.0
+---
+
+Apache Guacamole 1.1.0 and older may mishandle pointers involved in processing
+data received via RDP static virtual channels. If a user connects to a
+malicious or compromised RDP server, a series of specially-crafted PDUs could
+result in memory corruption, possibly allowing arbitrary code to be executed
+with the privileges of the running guacd process.
+
+Acknowledgements: We would like to thank Eyal Itkin (Check Point Research) for
+reporting this issue.
+
