CVE Catalog

CVE-2026-78463

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.88%

57th percentile - higher than 57% of all known CVEs

Summary

Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Risk Assessment

An attacker could remotely inject and execute malicious code in the Remote Desktop client, potentially leading to session or system compromise.

Recommendation

Install the latest security updates for Remote Desktop Client.

Other vulnerabilities in Remote Desktop Client

See all
Original NVD description (English source)

Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS