Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

21 records

Priority LOW 31

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-08-19 Fixed in 11.3.9 CWE-126
Priority MEDIUM 43

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0126 Published 2026-06-09 Fixed in 1.2.7214.0, 10.0.14393.9234 +12 CWE-416
Priority LOW 35

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00461 Published 2026-06-09 Fixed in 1.2.7214.0, 10.0.14393.9234 +12 CWE-416
Priority LOW 35

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00461 Published 2026-06-09 Fixed in 1.2.7214.0, 10.0.14393.9234 +12 CWE-122
Priority LOW 35

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00461 Published 2026-06-09 Fixed in 10.0.14393.9234, 10.0.17763.8880 +9 CWE-122
Priority LOW 35

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00397 Published 2026-06-09 Fixed in 1.2.7214.0, 10.0.14393.9234 +12 CWE-362
Priority MEDIUM 42

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00954 Published 2026-06-09 Fixed in 10.0.14393.9234, 10.0.17763.8880 +11 CWE-122
TI-2026-19048 CVE-2026-23656 · GHSA-53j2-qxv2-hfqj

Windows App Installer Spoofing Vulnerability

Priority LOW 26

Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00346 Published 2026-03-10 Fixed in 2.0.964 CWE-345
Priority LOW 33

Improper link resolution before file access ('link following') in Windows App for Mac allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00374 Published 2026-02-10 Fixed in 11.3.2 CWE-59
Priority MEDIUM 41

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00596 Published 2025-10-14 Fixed in 1.2.6599.0, 10.0.10240.21161 +15 CWE-416
Priority MEDIUM 42

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01141 Published 2025-07-08 Fixed in 1.2.6353.0, 10.0.10240.21073 +14 CWE-23
Priority LOW 32

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01564 Published 2025-06-10 Fixed in 1.2.6278.0, 10.0.10240.21034 +13 CWE-125
Priority MEDIUM 43

Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01427 Published 2025-05-13 Fixed in 1.2.6228.0, 10.0.10240.21014 +13 CWE-122
Priority MEDIUM 40

Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01519 Published 2025-04-08 Fixed in 1.2.6081.0, 10.0.10240.20978 +13 CWE-122
Priority MEDIUM 46

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03182 Published 2025-03-11 Fixed in 1.2.6017.0, 10.0.10240.20947 +14 CWE-23