Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| microsoft | remote desktop | 1.2.0.0 – < 1.2.7099.0 | |
| microsoft | remote desktop client | < 2.0.1070.0 | |
| Microsoft | Remote Desktop client for Windows Desktop | 1.2.0.0 – < 1.2.7099.0 | |
| microsoft | windows 10 1607 | < 10.0.14393.9060 | |
| microsoft | windows 10 1809 | < 10.0.17763.8644 | |
| microsoft | windows 10 21h2 | < 10.0.19044.7184 | |
| microsoft | windows 10 22h2 | < 10.0.19045.7184 | |
| microsoft | windows 11 23h2 | < 10.0.22631.6936 | |
| microsoft | windows 11 24h2 | < 10.0.26100.8246 | |
| microsoft | windows 11 25h2 | < 10.0.26200.8246 | |
| microsoft | windows 11 26H1 | 10.0.28000.0 – < 10.0.28000.1836 | |
| Microsoft | Windows 11 version 26H1 | 10.0.28000.0 – < 10.0.28000.1836 | |
| microsoft | windows server 2012 | r2 | |
| microsoft | windows server 2016 | < 10.0.14393.9060 | |
| microsoft | windows server 2019 | < 10.0.17763.8644 | |
| microsoft | windows server 2022 | < 10.0.20348.5020 | |
| microsoft | windows server 2022 23h2 | < 10.0.25398.2274 | |
| microsoft | windows server 2025 | < 10.0.26100.32690 |
cpe:2.3:a:microsoft:remote_desktop_client:*:*:*:*:*:windows:*:* < 2.0.1070.0cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:* < 10.0.14393.9060cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:* < 10.0.14393.9060cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:* < 10.0.17763.8644cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:* < 10.0.17763.8644cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:* < 10.0.19044.7184cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:* < 10.0.19044.7184cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:* < 10.0.19044.7184cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:* < 10.0.19045.7184cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:* < 10.0.19045.7184cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:* < 10.0.22631.6936cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:* < 10.0.22631.6936cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:* < 10.0.26100.8246cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:* < 10.0.26100.8246cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:* < 10.0.26200.8246cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:* < 10.0.26200.8246cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:* < 10.0.28000.1836cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:* < 10.0.28000.1836cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:* < 10.0.14393.9060cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:* < 10.0.17763.8644cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:* < 10.0.20348.5020cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:* < 10.0.25398.2274cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:* < 10.0.26100.32690Dos herramientas gratuitas, una sola defensa: el Sensor detecta a quien sondea su servidor; Shield detiene a los atacantes conocidos antes de que lleguen a su sitio.
Instálelo y su cuota diaria de API sube a 30.000 consultas, sin solicitudes.