Windows App Client For Windows Desktop (Microsoft) - vulnerabilities (CVEs)

17 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-06-09. Vendor: Microsoft.

CVEs of Windows App Client For Windows Desktop

• CVE-2026-47289 - CVSS 8.8 (high), 2026-06-09: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
• CVE-2026-45639 - CVSS 7.5 (high), 2026-06-09: Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
• CVE-2026-44801 - CVSS 7.5 (high), 2026-06-09: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
• CVE-2026-44799 - CVSS 7.5 (high), 2026-06-09: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
• CVE-2026-42992 - CVSS 7.5 (high), 2026-06-09: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
• CVE-2026-42985 - CVSS 8.8 (high), 2026-06-09: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
• CVE-2026-42909 - CVSS 7.5 (high), 2026-06-09: Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to…
• CVE-2026-42908 - CVSS 7.5 (high), 2026-06-09: Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
• CVE-2026-23656 - CVSS 5.9 (medium), 2026-03-10: Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoofing over a network.
• CVE-2025-58718 - CVSS 8.8 (high), 2025-10-14: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
• CVE-2025-48817 - CVSS 8.8 (high), 2025-07-08: Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
• CVE-2025-32715 - CVSS 6.5 (medium), 2025-06-10: Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
• CVE-2025-29967 - CVSS 8.8 (high), 2025-05-13: Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
• CVE-2025-29966 - CVSS 8.8 (high), 2025-05-13: Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
• CVE-2025-27487 - CVSS 8 (high), 2025-04-08: Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.
• CVE-2025-26645 - CVSS 8.8 (high), 2025-03-11: Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
• CVE-2024-49105 - CVSS 8.4 (high), 2024-12-12: Remote Desktop Client Remote Code Execution Vulnerability