Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

30 records in Remote Desktop Client · all components

TI-2019-00638 CVE-2019-0887 · GHSA-v82h-xf3f-qj32

Path traversal in Microsoft Multiple

HIGH 72

A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an authenticated attacker abuses clipboard redirection, aka 'Remote Desktop Services Remote Code Execut…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.70966 Published 2019-07-15 No fix listed CWE-22

TI-2022-06374 CVE-2022-22017 · GHSA-xwch-gx2x-qj27

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 64

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.37105 Published 2022-05-10 Fixed in 1.2.3130, 10.0.20348.707 +1

TI-2021-13557 CVE-2021-34535 · GHSA-6j5r-87mw-77mg

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 58

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.21858 Published 2021-08-12 Fixed in publication, 10.0.10240.19022 +9

TI-2025-19580 CVE-2025-26645 · GHSA-7m8x-93c8-87gw

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 46

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03182 Published 2025-03-11 Fixed in 1.2.6017.0, 10.0.10240.20947 +14 CWE-23

TI-2021-01386 CVE-2021-1669 · GHSA-cj6v-pvfq-h7pp

Windows Remote Desktop Security Feature Bypass Vulnerability

MEDIUM 46

Windows Remote Desktop Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03204 Published 2021-01-12 Fixed in publication

TI-2026-31167 CVE-2026-42985 · GHSA-c52c-3v9x-965h

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 43

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0126 Published 2026-06-09 Fixed in 1.2.7214.0, 10.0.14393.9234 +12 CWE-416

TI-2024-25415 CVE-2024-38131 · GHSA-5vvr-p8h5-fvqj

Clipboard Virtual Channel Extension Remote Code Execution Vulnerability

MEDIUM 43

Clipboard Virtual Channel Extension Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01323 Published 2024-08-13 Fixed in 10.0.26100.1457, 10.0.17763.6189 +14 CWE-591

TI-2023-13754 CVE-2023-29362 · GHSA-mmmq-84hv-hmpw

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 43

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01346 Published 2023-06-13 Fixed in 10.0.17763.4499, 1.2.4337.0 +10 CWE-122

TI-2026-55346 CVE-2026-80077 · GHSA-548x-6463-hm3w

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 42

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 1.2.7279.0 CWE-122

TI-2026-55343 CVE-2026-80074 · GHSA-5q3q-pwrr-jp7r

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 42

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 1.2.7279.0 CWE-122

TI-2026-54558 CVE-2026-78463 · GHSA-pgp6-8xfj-whr8

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 42

Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00863 Published 2026-09-08 Fixed in 1.2.7279.0 CWE-94

TI-2025-31004 CVE-2025-48817 · GHSA-chxm-rfr8-cf28

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 42

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01141 Published 2025-07-08 Fixed in 1.2.6353.0, 10.0.10240.21073 +14 CWE-23

TI-2024-32766 CVE-2024-49105 · GHSA-6wcv-fq4v-cvv9

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 42

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.01529 Published 2024-12-10 Fixed in 1.2.5716.0, 10.0.10240.20857 +13 CWE-284

TI-2021-16241 CVE-2021-38665 · GHSA-6483-ch6v-gp2h

Remote Desktop Protocol Client Information Disclosure Vulnerability

MEDIUM 42

Remote Desktop Protocol Client Information Disclosure Vulnerability

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.07018 Published 2021-11-10 Fixed in 1.2.2600, 10.0.10240.19119 +11

TI-2026-24694 CVE-2026-32157 · GHSA-5468-67hp-7rjg

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 41

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00778 Published 2026-04-14 Fixed in 1.2.7099.0, 10.0.28000.1836 CWE-416

TI-2025-36378 CVE-2025-58718 · GHSA-533r-cf7v-7wwj

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 41

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00596 Published 2025-10-14 Fixed in 1.2.6599.0, 10.0.10240.21161 +15 CWE-416

TI-2026-41086 CVE-2026-57098 · GHSA-ffcr-244p-cmjq

Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability

MEDIUM 40

Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00639 Published 2026-09-08 Fixed in 1.2.7279.0 CWE-347

TI-2026-33383 CVE-2026-45639 · GHSA-hpch-68rw-xfqq

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

MEDIUM 40

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00871 Published 2026-06-09 Fixed in 1.2.7214.0, 10.0.14393.9234 +12 CWE-125

TI-2025-20322 CVE-2025-27487 · GHSA-v3mw-3vwm-c6c7

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 40

Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01519 Published 2025-04-08 Fixed in 1.2.6081.0, 10.0.10240.20978 +13 CWE-122

TI-2022-19644 CVE-2022-41121 · GHSA-wqh9-8hv3-wc58

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 36

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01119 Published 2022-12-13 Fixed in 10.0.17763.3770, 10.0.19043.2364 +12

TI-2026-32685 CVE-2026-44801 · GHSA-g3rg-85ff-6538

Remote Desktop Client Remote Code Execution Vulnerability

LOW 35

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00461 Published 2026-06-09 Fixed in 1.2.7214.0, 10.0.14393.9234 +12 CWE-416

TI-2026-32683 CVE-2026-44799 · GHSA-crj8-fmhj-6r4h

Remote Desktop Client Remote Code Execution Vulnerability

LOW 35

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00461 Published 2026-06-09 Fixed in 1.2.7214.0, 10.0.14393.9234 +12 CWE-122

TI-2026-31117 CVE-2026-42913 · GHSA-m239-3rrf-2x78

Remote Desktop Client Remote Code Execution Vulnerability

LOW 35

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00473 Published 2026-06-09 Fixed in 1.2.7214.0, 10.0.22631.7219 +5 CWE-362

TI-2026-31113 CVE-2026-42909 · GHSA-2mfp-vqrw-7p7v

Remote Desktop Client Remote Code Execution Vulnerability

LOW 35

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00397 Published 2026-06-09 Fixed in 1.2.7214.0, 10.0.14393.9234 +12 CWE-362

TI-2022-10171 CVE-2022-26940 · GHSA-r3g9-4c8x-fwv7

Remote Desktop Protocol Client Information Disclosure Vulnerability

LOW 34

Remote Desktop Protocol Client Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02684 Published 2022-05-10 Fixed in 1.2.3130, 10.0.20348.707 +1

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1