5797 matches found
CVE-2026-69616
Windows Remote Desktop Services is affected by an out-of-bounds read vulnerability that allows an authorized local attacker to disclose information (CVSS 3.1: 5.5 MEDIUM — local vector, low privileges required, high confidentiality impact, no integrity or availability impact). CISA's SSVC assessm...
EUVD-2026-73557
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally...
EUVD-2026-73533
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
CVE-2026-69536
CVE-2026-69536 is a use-after-free vulnerability in Windows Remote Desktop Services that allows an authorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that while exploitation requ...
CVE-2026-69599
Windows Remote Desktop Services contains a use-after-free vulnerability that allows an authorized attacker (low privileges required) to execute code over a network. The CVSS 3.1 score is 7.5 (HIGH) , with high attack complexity and no user interaction required, impacting confidentiality, integrit...
EUVD-2026-73531
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
EUVD-2026-73499
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-69475
CVE-2026-69475 is an elevation of privilege vulnerability in Windows Remote Desktop Services , caused by an untrusted pointer dereference . An authorized local attacker with low privileges can exploit this with low complexity and no user interaction to gain high impact across confidentiality, int...
EUVD-2026-73470
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...
CVE-2026-69358
Microsoft Remote Desktop Client is affected by a use of uninitialized resource flaw that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction and carries a CVSS 3.1 score of 7.1 (HIGH) with high impact on confidentiality, integ...
EUVD-2026-73451
Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network...
CVE-2026-69317
Windows Remote Desktop Client is affected by an out-of-bounds read vulnerability that allows an authorized attacker to disclose information over a network. The flaw is classified as an information disclosure with a CVSS 3.1 score of 5.7 (Medium) , requiring low privileges and user interaction. CI...
EUVD-2026-73397
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-68828
CVE-2026-68828 is a heap-based buffer overflow in the Microsoft Remote Desktop Client that allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is rated CVSS 3.1: 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network-based exploi...
CVE-2026-83998
A heap-based buffer overflow in Microsoft Remote Desktop Client allows an unauthorized attacker to achieve remote code execution over a network, requiring user interaction but no prior privileges (CVSS 8.8 HIGH ). The CNA is Microsoft ([email protected]), with the advisory published via MSRC ....
EUVD-2026-73361
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
EUVD-2026-73323
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-80074
CVE-2026-80074 is a heap-based buffer overflow in Microsoft Remote Desktop Client that allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user inter...
CVE-2026-80077
CVE-2026-80077 is a heap-based buffer overflow in the Microsoft Remote Desktop Client that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 8.8 (HIGH) , with an attack vector of network, low complexity, no privileges required, and user intera...