CVE-2026-68828
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
A heap-based buffer overflow exists in Remote Desktop Client. This allows an unauthorized attacker to execute code over a network.
Risk Assessment
An unauthorized remote attacker could exploit this to execute code on the target system, potentially leading to full system compromise or malware propagation.
Recommendation
Apply the latest Windows security updates that address this vulnerability.
Other vulnerabilities in Remote Desktop Client
See all- CVE-2026-54990Critical
A heap-based buffer overflow in the Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2021-38666High
Remote Code Execution vulnerability in Remote Desktop Client. Details are not provided in the description.
- CVE-2021-34535High
Remote code execution vulnerability in Remote Desktop Client. An attacker could exploit this to execute code remotely on the client machine.
- CVE-2026-83998High
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-80077High
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-80074High
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-78463High
Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-77896Medium
Integer overflow or wraparound in Remote Desktop Client allows an unauthenticated attacker to perform a denial of service attack over a network.
- CVE-2026-69485High
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
- CVE-2026-69358High
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
Original NVD description (English source)
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS