Microsoft Remote Desktop Client vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Remote Desktop Client: 12 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:remote_desktop_client
CVE-2026-80077
High · 8.8
CWE-122 Sep 8, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-80074
High · 8.8
CWE-122 Sep 8, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-78463
High · 8.8
CWE-94 Sep 8, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-57098
High · 7.5
CWE-347 Sep 8, 2026
Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability
Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-45639
High · 7.5
CWE-125 Jun 9, 2026
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
CVE-2026-44801
High · 7.5
CWE-787 Jun 9, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-44799
High · 7.5
CWE-122 Jun 9, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-42985
High · 8.8
CWE-787 Jun 9, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-42913
High · 7.5
CWE-362 Jun 9, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-42909
High · 7.5
CWE-787 Jun 9, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-32157
High · 8.8
CWE-416 Apr 14, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2025-58718
High · 8.8
CWE-416 Oct 14, 2025
Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.