Remote Desktop Client (Microsoft) - vulnerabilities (CVEs)
30 CVEs, 0 in the last 30 days, 105 known versions, newest CVE from 2026-09-08. Vendor: Microsoft.
CVEs of Remote Desktop Client
- CVE-2026-80074 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-80077 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-78463 - CVSS 8.8 (high), 2026-09-08: Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-57098 - CVSS 7.5 (high), 2026-09-08: Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network.
- CVE-2026-45639 - CVSS 7.5 (high), 2026-06-09: Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
- CVE-2026-44801 - CVSS 7.5 (high), 2026-06-09: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-44799 - CVSS 7.5 (high), 2026-06-09: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-42985 - CVSS 8.8 (high), 2026-06-09: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-42913 - CVSS 7.5 (high), 2026-06-09: Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to…
- CVE-2026-42909 - CVSS 7.5 (high), 2026-06-09: Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to…
- CVE-2026-32157 - CVSS 8.8 (high), 2026-04-14: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2025-58718 - CVSS 8.8 (high), 2025-10-14: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2025-48817 - CVSS 8.8 (high), 2025-07-08: Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2025-32715 - CVSS 6.5 (medium), 2025-06-10: Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
- CVE-2025-27487 - CVSS 8 (high), 2025-04-08: Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.
- CVE-2025-26645 - CVSS 8.8 (high), 2025-03-11: Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2024-49105 - CVSS 8.4 (high), 2024-12-12: Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2024-38131 - CVSS 8.8 (high), 2024-08-13: Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
- CVE-2023-29362 - CVSS 8.8 (high), 2023-06-14: Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2023-29352 - CVSS 6.5 (medium), 2023-06-14: Windows Remote Desktop Security Feature Bypass Vulnerability
- CVE-2023-28267 - CVSS 6.5 (medium), 2023-04-11: Remote Desktop Protocol Client Information Disclosure Vulnerability
- CVE-2022-41121 - CVSS 7.8 (high), 2022-12-13: Windows Graphics Component Elevation of Privilege Vulnerability
- CVE-2022-26940 - CVSS 6.5 (medium), 2022-05-10: Remote Desktop Protocol Client Information Disclosure Vulnerability
- CVE-2022-22015 - CVSS 6.5 (medium), 2022-05-10: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- CVE-2022-22017 - CVSS 8.8 (high), 2022-05-10: Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2022-24503 - CVSS 5.4 (medium), 2022-03-09: Remote Desktop Protocol Client Information Disclosure Vulnerability
- CVE-2021-38665 - CVSS 7.4 (high), 2021-11-10: Remote Desktop Protocol Client Information Disclosure Vulnerability
- CVE-2021-34535 - CVSS 8.8 (high), 2021-08-12: Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2021-1669 - CVSS 8.8 (high), 2021-01-12: Windows Remote Desktop Security Feature Bypass Vulnerability
- CVE-2019-0887 - CVSS 8 (high), 2019-07-15: A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an authenticated attacker abuses…
