Microsoft Windows App vulnerabilities
21 vulnerabilities
Known vulnerabilities in Microsoft Windows App, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-26645microsoftremote_desktop_client+38
EPSS score3.18%
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2025-48817microsoftremote_desktop_client+38EPSS score1.14%
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2025-58718microsoftremote_desktop_client+40EPSS score0.60%
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2025-29966microsoftremote_desktop+36EPSS score1.43%
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.CVE-2025-27487microsoftremote_desktop_client+36EPSS score1.49%
Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.CVE-2025-32715microsoftremote_desktop_client+36EPSS score1.44%
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.CVE-2020-0919microsoftmicrosoft remote desktop for mac+1EPSS score0.79%
An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load unsigned binaries, aka 'Microsoft Remote Desktop App for Mac Elevation of Privilege Vulnerability'.CVE-2024-49105microsoftremote_desktop_client+36EPSS score1.53%
Remote Desktop Client Remote Code Execution VulnerabilityCVE-2026-21517microsoftwindows_app+1EPSS score0.38%
Improper link resolution before file access ('link following') in Windows App for Mac allows an authorized attacker to elevate privileges locally.CVE-2026-59124microsoftmicrosoft hpc pack 2019+1EPSS score1.53%
Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.CVE-2026-59133microsoftmicrosoft hpc pack 2019+1EPSS score0.91%
Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker to elevate privileges over a network.CVE-2026-47289microsoftwindows_10_1607+28EPSS score0.82%
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-42908microsoftwindows_10_1607+28EPSS score1.03%
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.CVE-2026-42909microsoftremote_desktop_client+30EPSS score0.47%
Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-42985microsoftremote_desktop_client+30EPSS score0.82%
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-42992microsoftwindows_10_1607+24EPSS score0.61%
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-69550microsoftwindows_app+1EPSS score0.92%
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.CVE-2026-44801microsoftremote_desktop_client+30EPSS score0.61%
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-44799microsoftremote_desktop_client+30EPSS score0.61%
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-45639microsoftremote_desktop_client+30EPSS score1.03%
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.