microsoft remote desktop client vulnerabilities (CVE)

CVE records published for microsoft remote desktop client, newest first. Follow to get an email when a new one appears.

16 results
7.5High
CVE-2026-44801

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Remote Desktop client for Windows Desktop; Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

8.8High
CVE-2026-42985

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Remote Desktop client for Windows Desktop; Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

1.3%EPSS
7.5High
CVE-2026-44799

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Remote Desktop client for Windows Desktop; Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

7.5High
CVE-2026-42913

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Remote Desktop client for Windows Desktop; Microsoft Windows 11 version 23H2; Microsoft Windows 11 Version 23H2; Microsoft Windows 11 Version 24H2

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

7.5High
CVE-2026-42909

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Remote Desktop client for Windows Desktop; Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

8.8High
CVE-2025-48817

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Remote Desktop client for Windows Desktop; Microsoft Windows 10 Version 1507; Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

1.1%EPSS
8.0High
CVE-2025-27487

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Remote Desktop client for Windows Desktop; Microsoft Windows 10 Version 1507; Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809

Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.

1.5%EPSS
8.8High
CVE-2025-26645

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Remote Desktop client for Windows Desktop; Microsoft Windows 10 Version 1507; Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

3.2%EPSS