Microsoft Remote Desktop Client vulnerabilities
30 vulnerabilities
Known vulnerabilities in Microsoft Remote Desktop Client, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-1669microsoftmicrosoft remote desktop for ios+18
EPSS score3.20%
Windows Remote Desktop Security Feature Bypass VulnerabilityCVE-2021-38665microsoftremote_desktop_client+22EPSS score7.02%
Remote Desktop Protocol Client Information Disclosure VulnerabilityCVE-2021-34535microsoftremote_desktop_client+19EPSS score21.86%
Remote Desktop Client Remote Code Execution VulnerabilityCVE-2025-26645microsoftremote_desktop_client+38EPSS score3.18%
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2025-48817microsoftremote_desktop_client+38EPSS score1.14%
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2025-58718microsoftremote_desktop_client+40EPSS score0.60%
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2025-27487microsoftremote_desktop_client+36EPSS score1.49%
Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.CVE-2025-32715microsoftremote_desktop_client+36EPSS score1.44%
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.CVE-2022-41121microsoftpowershell+31EPSS score1.12%
Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2022-26940microsoftremote_desktop_client+4EPSS score2.68%
Remote Desktop Protocol Client Information Disclosure VulnerabilityCVE-2022-22015microsoftremote_desktop_client+28EPSS score2.68%
Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityCVE-2022-22017microsoftremote_desktop_client+4EPSS score37.10%
Remote Desktop Client Remote Code Execution VulnerabilityCVE-2022-24503microsoftremote_desktop_client+28EPSS score2.44%
Remote Desktop Protocol Client Information Disclosure VulnerabilityCVE-2024-38131microsoftremote_desktop_client+37EPSS score1.32%
Clipboard Virtual Channel Extension Remote Code Execution VulnerabilityCVE-2024-49105microsoftremote_desktop_client+36EPSS score1.53%
Remote Desktop Client Remote Code Execution VulnerabilityCVE-2019-0887microsoftmultiple+10EPSS score70.97%
A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an authenticated attacker abuses clipboard redirection, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.CVE-2026-42909microsoftremote_desktop_client+30EPSS score0.47%
Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-42985microsoftremote_desktop_client+30EPSS score0.82%
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-42913microsoftremote_desktop_client+12EPSS score0.47%
Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-57098microsoftremote_desktop_client+1EPSS score0.64%
Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network.