PatchTheCVEremote desktop client vulnerabilities and fixes
Recent CVEs affecting remote desktop client, with upgrade or downgrade steps. 5 tracked.
Also searched as: remotedesktopclient.
remote desktop client has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-09-08. Highest priority: CVE-2026-32157 (score 50/100).
- CVE-2026-32157 HIGH 8.8 UPGRADE UPGRADE Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-78463 HIGH 8.8 UPGRADE Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized atta
- CVE-2026-80074 HIGH 8.8 UPGRADE Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a net
- CVE-2026-80077 HIGH 8.8 UPGRADE Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a net
- CVE-2026-57098 HIGH 7.5 UPGRADE Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disc
FAQ
How do I fix remote desktop client vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is remote desktop client being exploited right now?
None of the tracked remote desktop client CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which remote desktop client CVE should I patch first?
CVE-2026-32157 currently ranks highest (50/100): Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network..