Microsoft Remote Desktop Client
30 CVEs affecting Microsoft Remote Desktop Client. Latest disclosed: 2026-09-08. Critical: 0, High: 24.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-80077 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-80074 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-78463 | High | 8.8 | 2026-09-08 | Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-42985 | High | 8.8 | 2026-06-09 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-32157 | High | 8.8 | 2026-04-14 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2025-58718 | High | 8.8 | 2025-10-14 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2025-48817 | High | 8.8 | 2025-07-08 | Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2025-26645 | High | 8.8 | 2025-03-11 | Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2024-38131 | High | 8.8 | 2024-08-13 | Clipboard Virtual Channel Extension Remote Code Execution Vulnerability |
CVE-2023-29362 | High | 8.8 | 2023-06-14 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2022-22017 | High | 8.8 | 2022-05-10 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2021-34535 | High | 8.8 | 2021-08-12 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2021-1669 | High | 8.8 | 2021-01-12 | Windows Remote Desktop Security Feature Bypass Vulnerability |
CVE-2024-49105 | High | 8.4 | 2024-12-12 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2025-27487 | High | 8.0 | 2025-04-08 | Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network. |
CVE-2019-0887 | High | 8.0 | 2019-07-15 | A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an authenticated attacker abuses clipboard… |
CVE-2022-41121 | High | 7.8 | 2022-12-13 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2026-57098 | High | 7.5 | 2026-09-08 | Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network. |
CVE-2026-45639 | High | 7.5 | 2026-06-09 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-44801 | High | 7.5 | 2026-06-09 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |