Windows Remote Desktop
by Microsoft
CVEs (43)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-21533 | Hig | 0.63 | 7.8 | 0.04 | KEV | Feb 10, 2026 | Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally. | |
| CVE-2022-22017 | Hig | 0.60 | 8.8 | 0.38 | May 10, 2022 | Remote Desktop Client Remote Code Execution Vulnerability | ||
| CVE-2022-21990 | Hig | 0.59 | 8.8 | 0.19 | Mar 9, 2022 | Remote Desktop Client Remote Code Execution Vulnerability | ||
| CVE-2020-0734 | Hig | 0.58 | 8.8 | 0.16 | Feb 11, 2020 | A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0681. | ||
| CVE-2019-1333 | Hig | 0.58 | 8.8 | 0.16 | Oct 10, 2019 | A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. | ||
| CVE-2019-1291 | Hig | 0.58 | 8.8 | 0.12 | Sep 11, 2019 | A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787, CVE-2019-0788, CVE-2019-1290. | ||
| CVE-2019-1290 | Hig | 0.58 | 8.8 | 0.12 | Sep 11, 2019 | A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787, CVE-2019-0788, CVE-2019-1291. | ||
| CVE-2019-0788 | Hig | 0.58 | 8.8 | 0.12 | Sep 11, 2019 | A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787, CVE-2019-1290, CVE-2019-1291. | ||
| CVE-2019-0787 | Hig | 0.58 | 8.8 | 0.13 | Sep 11, 2019 | A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0788, CVE-2019-1290, CVE-2019-1291. | ||
| CVE-2025-58718 | Hig | 0.57 | 8.8 | 0.01 | Oct 14, 2025 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2025-48817 | Hig | 0.57 | 8.8 | 0.01 | Jul 8, 2025 | Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2025-29967 | Hig | 0.57 | 8.8 | 0.01 | May 13, 2025 | Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. | ||
| CVE-2025-29966 | Hig | 0.57 | 8.8 | 0.01 | May 13, 2025 | Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network. | ||
| CVE-2025-26645 | Hig | 0.57 | 8.8 | 0.03 | Mar 11, 2025 | Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2024-43533 | Hig | 0.57 | 8.8 | 0.01 | Oct 8, 2024 | Remote Desktop Client Remote Code Execution Vulnerability | ||
| CVE-2024-38131 | Hig | 0.57 | 8.8 | 0.01 | Aug 13, 2024 | Clipboard Virtual Channel Extension Remote Code Execution Vulnerability | ||
| CVE-2023-29362 | Hig | 0.57 | 8.8 | 0.01 | Jun 14, 2023 | Remote Desktop Client Remote Code Execution Vulnerability | ||
| CVE-2022-30221 | Hig | 0.57 | 8.8 | 0.02 | Jul 12, 2022 | Windows Graphics Component Remote Code Execution Vulnerability | ||
| CVE-2022-21851 | Hig | 0.57 | 8.8 | 0.03 | Jan 11, 2022 | Remote Desktop Client Remote Code Execution Vulnerability | ||
| CVE-2022-21850 | Hig | 0.57 | 8.8 | 0.03 | Jan 11, 2022 | Remote Desktop Client Remote Code Execution Vulnerability |
- risk 0.63cvss 7.8epss 0.04
Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
- risk 0.60cvss 8.8epss 0.38
Remote Desktop Client Remote Code Execution Vulnerability
- risk 0.59cvss 8.8epss 0.19
Remote Desktop Client Remote Code Execution Vulnerability
- risk 0.58cvss 8.8epss 0.16
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0681.
- risk 0.58cvss 8.8epss 0.16
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.
- risk 0.58cvss 8.8epss 0.12
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787, CVE-2019-0788, CVE-2019-1290.
- risk 0.58cvss 8.8epss 0.12
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787, CVE-2019-0788, CVE-2019-1291.
- risk 0.58cvss 8.8epss 0.12
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787, CVE-2019-1290, CVE-2019-1291.
- risk 0.58cvss 8.8epss 0.13
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0788, CVE-2019-1290, CVE-2019-1291.
- risk 0.57cvss 8.8epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.03
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Remote Desktop Client Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
Remote Desktop Client Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Windows Graphics Component Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.03
Remote Desktop Client Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.03
Remote Desktop Client Remote Code Execution Vulnerability
Page 1 of 3