CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 09/06/2026 |
| CVE-2026-45639 | ÉLEVÉE7.5 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. | 09/06/2026 |
| CVE-2026-44801 | ÉLEVÉE7.5 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 09/06/2026 |
| CVE-2026-44799 | ÉLEVÉE7.5 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 09/06/2026 |
| CVE-2026-42992 | ÉLEVÉE7.5 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 09/06/2026 |
| CVE-2026-42985 | ÉLEVÉE8.8 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 09/06/2026 |
| CVE-2026-42909 | ÉLEVÉE7.5 | Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 09/06/2026 |
| CVE-2026-42908 | ÉLEVÉE7.5 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. | 09/06/2026 |
| CVE-2026-23656 | MOYENNE5.9 | Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoofing over a network. | 10/03/2026 |
| CVE-2026-21517 | ÉLEVÉE7.0 | Improper link resolution before file access ('link following') in Windows App for Mac allows an authorized attacker to elevate privileges locally. | 10/02/2026 |
| CVE-2025-58718 | ÉLEVÉE8.8 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 14/10/2025 |
| CVE-2025-48817 | ÉLEVÉE8.8 | Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 08/07/2025 |
| CVE-2025-32715 | MOYENNE6.5 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. | 10/06/2025 |
| CVE-2025-29966 | ÉLEVÉE8.8 | Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network. | 13/05/2025 |
| CVE-2025-27487 | ÉLEVÉE8.0 | Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network. | 08/04/2025 |
| CVE-2025-26645 | ÉLEVÉE8.8 | Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 11/03/2025 |
| CVE-2024-49105 | ÉLEVÉE8.4 | Remote Desktop Client Remote Code Execution Vulnerability | 12/12/2024 |