CVE-2025-58737 Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally

Description

Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Windows Server 2019 10.0	10.0.17763.0 → < 10.0.17763.7919	10.0.17763.7919
Windows Server 2019 (Server Core installation) 10.0	10.0.17763.0 → < 10.0.17763.7919	10.0.17763.7919
Windows Server 2022 10.0	10.0.20348.0 → < 10.0.20348.4294	10.0.20348.4294
Windows Server 2025 (Server Core installation) 10.0	10.0.26100.0 → < 10.0.26100.6899	10.0.26100.6899
Windows Server 2022, 23H2 Edition (Server Core installation) 10.0	10.0.25398.0 → < 10.0.25398.1913	10.0.25398.1913
Windows Server 2025 10.0	10.0.26100.0 → < 10.0.26100.6899	10.0.26100.6899
Windows Server 2016 10.0	10.0.14393.0 → < 10.0.14393.8519	10.0.14393.8519
Windows Server 2016 (Server Core installation) 10.0	10.0.14393.0 → < 10.0.14393.8519	10.0.14393.8519
Windows Server 2012 R2 6.3	6.3.9600.0 → < 6.3.9600.22824	6.3.9600.22824

Afficher l’autre branche Masquer l’autre branche

Produit	Versions touchées	Corrigé en
Windows Server 2012 R2 (Server Core installation) 6.3	6.3.9600.0 → < 6.3.9600.22824	6.3.9600.22824

Autres CVE de Windows Server 2019

Les 5745 CVE de Windows Server 2019 →

CVE-2026-108136 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally 7.8 Élevée CVE-2026-108471 Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to… 8.8 Élevée CVE-2026-108129 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network 6.5 Moyenne CVE-2026-108132 Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally 7.0 Élevée