66857 matches found
CVE-2026-69358
Microsoft Remote Desktop Client is affected by a use of uninitialized resource flaw that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction and carries a CVSS 3.1 score of 7.1 (HIGH) with high impact on confidentiality, integ...
EUVD-2026-73470
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...
EUVD-2026-73451
Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network...
CVE-2026-69317
Windows Remote Desktop Client is affected by an out-of-bounds read vulnerability that allows an authorized attacker to disclose information over a network. The flaw is classified as an information disclosure with a CVSS 3.1 score of 5.7 (Medium) , requiring low privileges and user interaction. CI...
EUVD-2026-73397
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-68828
CVE-2026-68828 is a heap-based buffer overflow in the Microsoft Remote Desktop Client that allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is rated CVSS 3.1: 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network-based exploi...
CVE-2026-83998
A heap-based buffer overflow in Microsoft Remote Desktop Client allows an unauthorized attacker to achieve remote code execution over a network, requiring user interaction but no prior privileges (CVSS 8.8 HIGH ). The CNA is Microsoft ([email protected]), with the advisory published via MSRC ....
EUVD-2026-73361
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-80077
CVE-2026-80077 is a heap-based buffer overflow in the Microsoft Remote Desktop Client that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 8.8 (HIGH) , with an attack vector of network, low complexity, no privileges required, and user intera...
CVE-2026-80074
CVE-2026-80074 is a heap-based buffer overflow in Microsoft Remote Desktop Client that allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user inter...
EUVD-2026-73323
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
EUVD-2026-73322
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-78463
Microsoft Remote Desktop Client is affected by a code injection vulnerability (improper control of generation of code) that allows an unauthorized attacker to execute code over a network . The CNA (Microsoft) rates this as CVSS 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning e...
EUVD-2026-73299
Improper control of generation of code 'code injection' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
EUVD-2026-73285
Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network...
CVE-2026-77896
The Windows Remote Desktop Client is affected by an integer overflow or wraparound vulnerability. This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. While the CVSS scores vary between 6.5 and 7.5 depending on the source, they consistently indicat...
EUVD-2026-73137
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally...
CVE-2026-69544
CVE-2026-69544 is a heap-based buffer overflow in the Windows SMB Client that allows an authorized attacker with low local privileges to achieve local privilege escalation . The attack vector is local with low complexity and requires no user interaction , rated CVSS 3.1: 7.8 (HIGH) with high impa...
CVE-2026-69572
CVE-2026-69572 is an out-of-bounds read vulnerability in the Windows SMB Client that allows an authorized attacker (low privileges) to disclose information over a network . The CVSS 3.1 score is 5.7 (Medium) with vector AV:N/AC:L/PR:L/UI:R, indicating a network attack with low complexity, low req...