Veille CVE

Recherche « Microsoft Windows App Client for Windows Desktop »

10 CVE

Critique 0 Élevée 8 Moyenne 1 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft Windows App Client for Windows Desktop » ✕
  1. CVE-2026-69550 6.5 Moyenne

    Microsoft Windows App for Mac · Microsoft windows app

    Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

  2. CVE-2026-47289 8.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  3. CVE-2026-45639 7.5 Élevée

    Microsoft Remote Desktop client for Windows Desktop · Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2

    Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

  4. CVE-2026-44801 7.5 Élevée

    Microsoft Remote Desktop client for Windows Desktop · Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  5. CVE-2026-44799 7.5 Élevée

    Microsoft Remote Desktop client for Windows Desktop · Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  6. CVE-2026-42992 7.5 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  7. CVE-2026-42985 8.8 Élevée

    Microsoft Remote Desktop client for Windows Desktop · Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  8. CVE-2026-42909 7.5 Élevée

    Microsoft Remote Desktop client for Windows Desktop · Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2

    Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  9. CVE-2026-42908 7.5 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

  10. CVE-2026-4387 2.0 Faible

    StrongDM Desktop Application · StrongDM Desktop Client

    StrongDM Desktop Application before 23.74.0 (Desktop Client before 53.77.0) on Microsoft Windows stores authentication state, including a JSON Web Token and asymmetric key material, in cleartext in a per-user state file located at C:\Users\<username>\.sdm\state.kv. The file is protected only by default user-level NTFS permissions. Exploitation requires local read access to the affected user's profile directory and additional deployment and execution conditions on the target host. The condition was reported through coordinated disclosure by Hope Walker (SpecterOps).