CVE Catalog
CVE-2026-54990
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.55%
42th percentile - higher than 42% of all known CVEs
Summary
A heap-based buffer overflow in the Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Risk Assessment
The risk includes the possibility of remote code execution by an unauthenticated attacker, which could lead to compromise of the target system.
Recommendation
It is recommended to immediately update the Remote Desktop Client to the latest version and apply security patches from the vendor.
Original NVD description (English source)
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.