Priority MEDIUM 52
Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01532 · Published 2026-08-11 · Fixed in 6.3.8359 CWE-502
Priority MEDIUM 46
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03182 · Published 2025-03-11 · Fixed in 1.2.6017.0, 10.0.10240.20947 +14 CWE-23
Priority MEDIUM 43
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0126 · Published 2026-06-09 · Fixed in 1.2.7214.0, 10.0.14393.9234 +12 CWE-416
Priority MEDIUM 43
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01427 · Published 2025-05-13 · Fixed in 1.2.6228.0, 10.0.10240.21014 +13 CWE-122
Priority MEDIUM 42
Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-08-11 · Fixed in 6.3.8359 CWE-250
Priority MEDIUM 42
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00954 · Published 2026-06-09 · Fixed in 10.0.14393.9234, 10.0.17763.8880 +11 CWE-122
Priority MEDIUM 42
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01141 · Published 2025-07-08 · Fixed in 1.2.6353.0, 10.0.10240.21073 +14 CWE-23
Priority MEDIUM 42
Remote Desktop Client Remote Code Execution Vulnerability
CVSS 3.1HIGH 8.4· Network · High privileges · User interaction · EPSS 0.01529 · Published 2024-12-10 · Fixed in 1.2.5716.0, 10.0.10240.20857 +13 CWE-284
Priority MEDIUM 41
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00596 · Published 2025-10-14 · Fixed in 1.2.6599.0, 10.0.10240.21161 +15 CWE-416
Priority MEDIUM 40
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00871 · Published 2026-06-09 · Fixed in 1.2.7214.0, 10.0.14393.9234 +12 CWE-125
Priority MEDIUM 40
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00871 · Published 2026-06-09 · Fixed in 10.0.14393.9234, 10.0.17763.8880 +11 CWE-125
Priority MEDIUM 40
Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.01519 · Published 2025-04-08 · Fixed in 1.2.6081.0, 10.0.10240.20978 +13 CWE-122
Priority LOW 35
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00461 · Published 2026-06-09 · Fixed in 1.2.7214.0, 10.0.14393.9234 +12 CWE-416
Priority LOW 35
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00461 · Published 2026-06-09 · Fixed in 1.2.7214.0, 10.0.14393.9234 +12 CWE-122
Priority LOW 35
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00461 · Published 2026-06-09 · Fixed in 10.0.14393.9234, 10.0.17763.8880 +9 CWE-122
Priority LOW 35
Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00397 · Published 2026-06-09 · Fixed in 1.2.7214.0, 10.0.14393.9234 +12 CWE-362
Priority LOW 35
An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load unsigned binaries, aka 'Microsoft Remote Desktop App for Mac Elevation of Privilege Vulnerability'.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00788 · Published 2020-04-15 · No fix listed
Priority LOW 33
Improper link resolution before file access ('link following') in Windows App for Mac allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00374 · Published 2026-02-10 · Fixed in 11.3.2 CWE-59
Priority LOW 32
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01564 · Published 2025-06-10 · Fixed in 1.2.6278.0, 10.0.10240.21034 +13 CWE-125
Priority LOW 31
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-08-19 · Fixed in 11.3.9 CWE-126
Priority LOW 26
Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00346 · Published 2026-03-10 · Fixed in 2.0.964 CWE-345
THREATIST.IORead the docs