8.8
High
CVE-2026-78463 Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to…
Description
Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Remote Desktop client for Windows Desktop 1.2 | 1.2.0.0 → < 1.2.7279.0 | 1.2.7279.0 |
References
- Remote Desktop Client Remote Code Execution Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Remote Desktop client for Windows Desktop
The 37 CVEs of Remote Desktop client for Windows Desktop →
CVE-2026-80077
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network
8.8
High
CVE-2026-80074
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network
8.8
High
CVE-2026-57098
Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose…
7.5
High
CVE-2026-42985
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network
8.8
High