CVE-2026-97789
HighCVSS 7.5Summary
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Risk Assessment
Risk of remote system takeover.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Remote Desktop Client
See all- CVE-2026-83688High
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-54990Critical
A heap-based buffer overflow in the Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2021-38666High
Remote Code Execution vulnerability in Remote Desktop Client. Details are not provided in the description.
- CVE-2021-34535High
Remote code execution vulnerability in Remote Desktop Client. An attacker could exploit this to execute code remotely on the client machine.
- CVE-2026-83998High
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-80077High
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-80074High
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-78463High
Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-77896Medium
Integer overflow or wraparound in Remote Desktop Client allows an unauthenticated attacker to perform a denial of service attack over a network.
- CVE-2026-69485High
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
Original NVD description (English source)
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

