CVE-2026-61918
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
Risk Assessment
Risk of confidential data leakage via remote unauthenticated attack.
Recommendation
Install the available security update for Remote Desktop Client.
Other vulnerabilities in Remote Desktop Client
See all- CVE-2026-97789High
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-83688High
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-70012High
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-70006High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-70004High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69998High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69997High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69996High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69995High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69994High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
Original NVD description (English source)
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS