CVE-2026-42992
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
A heap-based buffer overflow vulnerability has been found in Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code remotely over a network.
Risk Assessment
The organization is at risk of remote code execution by an attacker who can send a crafted request to the Remote Desktop Client.
Recommendation
Install the latest security updates for Remote Desktop Client available through Microsoft Update.
Other vulnerabilities in Remote Desktop Client
See all- CVE-2026-97789High
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-83688High
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-70012High
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-70006High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-70004High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69998High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69997High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69996High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69995High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69994High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
Original NVD description (English source)
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS