Microsoft Windows App Client For Windows Desktop vulnerabilities
17 vulnerabilities
Known vulnerabilities in Microsoft Windows App Client For Windows Desktop, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-26645microsoftremote_desktop_client+38
EPSS score3.18%
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2025-48817microsoftremote_desktop_client+38EPSS score1.14%
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2025-58718microsoftremote_desktop_client+40EPSS score0.60%
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2025-29967microsoftremote desktop client for windows desktop+34EPSS score1.34%
Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.CVE-2025-29966microsoftremote_desktop+36EPSS score1.43%
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.CVE-2025-27487microsoftremote_desktop_client+36EPSS score1.49%
Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.CVE-2025-32715microsoftremote_desktop_client+36EPSS score1.44%
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.CVE-2024-49105microsoftremote_desktop_client+36EPSS score1.53%
Remote Desktop Client Remote Code Execution VulnerabilityCVE-2026-47289microsoftwindows_10_1607+28EPSS score0.82%
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-42908microsoftwindows_10_1607+28EPSS score1.03%
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.CVE-2026-42909microsoftremote_desktop_client+30EPSS score0.47%
Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-42985microsoftremote_desktop_client+30EPSS score0.82%
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-42992microsoftwindows_10_1607+24EPSS score0.61%
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-44801microsoftremote_desktop_client+30EPSS score0.61%
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-44799microsoftremote_desktop_client+30EPSS score0.61%
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-45639microsoftremote_desktop_client+30EPSS score1.03%
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.CVE-2026-23656microsoftwindows_app+1EPSS score0.31%
Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoofing over a network.