7.5
Élevée
CVE-2026-42913 Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client…
Description
Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Remote Desktop client for Windows Desktop 1.2 | 1.2.0.0 → < 1.2.7214.0 | 1.2.7214.0 |
| Windows 11 Version 23H2 10.0 | 10.0.22631.0 → < 10.0.22631.7219 | 10.0.22631.7219 |
| Windows 11 Version 24H2 10.0 | 10.0.26100.0 → < 10.0.26100.8655 | 10.0.26100.8655 |
| Windows 11 Version 25H2 10.0 | 10.0.26200.0 → < 10.0.26200.8655 | 10.0.26200.8655 |
| Windows 11 version 26H1 10.0 | 10.0.28000.0 → < 10.0.28000.2269 | 10.0.28000.2269 |
| Windows Server 2022 10.0 | 10.0.20348.0 → < 10.0.20348.5256 | 10.0.20348.5256 |
| Windows Server 2025 10.0 | 10.0.26100.0 → < 10.0.26100.32995 | 10.0.26100.32995 |
| Windows Server 2025 (Server Core installation) 10.0 | 10.0.26100.0 → < 10.0.26100.32995 | 10.0.26100.32995 |
Références
- Remote Desktop Client Remote Code Execution Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Remote Desktop client for Windows Desktop
Les 37 CVE de Remote Desktop client for Windows Desktop →
CVE-2026-80077
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network
8.8
Élevée
CVE-2026-80074
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network
8.8
Élevée
CVE-2026-78463
Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to…
8.8
Élevée
CVE-2026-57098
Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose…
7.5
Élevée