CVE-2023-35352
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk65th percentile - higher than 65% of all known CVEs
Summary
A vulnerability in Windows Remote Desktop allows for a security feature bypass, potentially leading to unauthorized access to the system.
Risk Assessment
Organizations may be exposed to attacks that allow control over users' remote sessions, potentially resulting in data loss or privacy breaches.
Recommendation
It is recommended to update Windows to the latest version to patch this vulnerability and to monitor access logs for remote sessions.
Other vulnerabilities in Windows Remote Desktop
See all- CVE-2026-40398High
Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
- CVE-2026-26151High
Insufficient UI warnings of dangerous operations in Windows Remote Desktop allow an unauthorized attacker to perform spoofing over a network.
- CVE-2026-69518High
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Windows Remote Desktop Security Feature Bypass Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS