CVE-2025-26645 Remote Desktop Client Remote Code Execution Vulnerability

...

CVE-2025-26645

CVE-2025-26645 affects the Windows Remote Desktop Client. The vulnerability is a relative path traversal in the Remote Desktop Client that allows an unauthenticated attacker to execute code over the network. According to the published metrics, the exploit requires network access with low attack c...

CVE-2025-26645 Remote Desktop Client Remote Code Execution Vulnerability

...

Remote Desktop Client Remote Code Execution Vulnerability

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

PT-2025-10850

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue allows remote attackers to execute arbitrary code and affect the system. It involves a relative path traversal in the Remote Desktop Client, enabling unauthorized...

KB5053887: Windows Server 2012 R2 Security Update (March 2025)

The remote Windows host is missing security update 5053887. It is, therefore, affected by multiple vulnerabilities - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. CVE-2025-26645 - Sensitive data storage in improperly locked memory...

KB5053603: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (March 2025)

The remote Windows host is missing security update 5053603. It is, therefore, affected by multiple vulnerabilities - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. CVE-2025-26645 - Sensitive data storage in improperly locked memory...

KB5053594: Windows 10 Version 1607 / Windows Server 2016 Security Update (March 2025)

The remote Windows host is missing security update 5053594. It is, therefore, affected by multiple vulnerabilities - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. CVE-2025-26645 - Sensitive data storage in improperly locked memory...

KB5053618: Windows 10 LTS 1507 Security Update (March 2025)

The remote Windows host is missing security update 5053618. It is, therefore, affected by multiple vulnerabilities - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. CVE-2025-26645 - Sensitive data storage in improperly locked memory...

KB5053602: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (March 2025)

The remote Windows host is missing security update 5053602. It is, therefore, affected by multiple vulnerabilities - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. CVE-2025-26645 - Sensitive data storage in improperly locked memory...

KB5053598: Windows 11 Version 24H2 / Windows Server 2025 Security Update (March 2025)

The remote Windows host is missing security update 5053598. It is, therefore, affected by multiple vulnerabilities - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. CVE-2025-26645 - Sensitive data storage in improperly locked memory...

CVE-2024-49105

Remote Desktop Client Remote Code Execution Vulnerability...

CVE-2024-49105

Remote Desktop Client Remote Code Execution Vulnerability...

Remote Desktop Client for Windows Remote Code Execution (December 2024)

The Remote Desktop Client for Windows installed on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

The vulnerability of the Remote Desktop Client for Windows operating systems, related to access control deficiencies, allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Desktop Client on Windows operating systems is related to lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Remote Desktop Client RCE Vulnerability (Dec 2024) - Windows

Remote Desktop Client is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2024-49105

CVE-2024-49105 affects the Windows Remote Desktop Client. It enables remote code execution over the network; exploitation requires user interaction and high privileges, with high impacts to confidentiality, integrity, and availability. CVSS v3.1 base score 8.4 (Network, Low attack complexity, Pri...

CVE-2024-49105 Remote Desktop Client Remote Code Execution Vulnerability

...

PT-2024-9327 · Microsoft · Remote Desktop +1

Name of the Vulnerable Software and Affected Versions: Microsoft Remote Desktop versions prior to 1.2.5807 Description: The issue is related to a remote code execution vulnerability in the Remote Desktop Client, which is associated with inadequate access control. This vulnerability can be exploit...

Microsoft Windows Remote Desktop Services 安全漏洞

Microsoft Windows Remote Desktop Services is a collection of features from Microsoft USA that allow users to remotely access graphical desktops and Windows applications. A remote code vulnerability exists in Microsoft Windows Remote Desktop Services due to use after release in the Remote Desktop...