microsoft windows app vulnerabilities (CVE)

CVE records published for microsoft windows app, newest first. Follow to get an email when a new one appears.

19 results
7.5High
CVE-2026-44801

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Remote Desktop client for Windows Desktop; Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

8.8High
CVE-2026-42985

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Remote Desktop client for Windows Desktop; Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

1.3%EPSS
7.5High
CVE-2026-44799

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Remote Desktop client for Windows Desktop; Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

7.5High
CVE-2026-42909

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Remote Desktop client for Windows Desktop; Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

8.8High
CVE-2025-48817

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Remote Desktop client for Windows Desktop; Microsoft Windows 10 Version 1507; Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

1.1%EPSS
8.8High
CVE-2025-29966

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Remote Desktop client for Windows Desktop; Microsoft Windows 10 Version 1507; Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809

Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.

1.3%EPSS
8.0High
CVE-2025-27487

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Remote Desktop client for Windows Desktop; Microsoft Windows 10 Version 1507; Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809

Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.

1.5%EPSS
8.8High
CVE-2025-26645

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Remote Desktop client for Windows Desktop; Microsoft Windows 10 Version 1507; Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

3.2%EPSS