CVE-2026-48563
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
Use After Free vulnerability in Remote Desktop Client allows an unauthorized attacker to execute code remotely.
Risk Assessment
An attacker could take control of the victim's system, steal data, or install malware.
Recommendation
Install the latest security patch from Microsoft for Remote Desktop Client.
Other vulnerabilities in Remote Desktop Client
See all- CVE-2026-97789High
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-83688High
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-70012High
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-70006High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-70004High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69998High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69997High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69996High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69995High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69994High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
Original NVD description (English source)
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS