Microsoft Windows App vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows App: 11 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:windows_app
CVE-2026-47289
High · 8.8
CWE-122 Jun 9, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-45639
High · 7.5
CWE-125 Jun 9, 2026
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
CVE-2026-44801
High · 7.5
CWE-787 Jun 9, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-44799
High · 7.5
CWE-122 Jun 9, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-42992
High · 7.5
CWE-122 Jun 9, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-42985
High · 8.8
CWE-787 Jun 9, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-42909
High · 7.5
CWE-787 Jun 9, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-42908
High · 7.5
CWE-125 Jun 9, 2026
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
CVE-2026-23656
Medium · 5.9
CWE-345 Mar 10, 2026
Windows App Installer Spoofing Vulnerability
Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-21517
High · 7.0
CWE-59 Feb 10, 2026
Windows App for Mac Installer Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows App for Mac allows an authorized attacker to elevate privileges locally.
CVE-2025-58718
High · 8.8
CWE-416 Oct 14, 2025
Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.