CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 09/06/2026 |
| CVE-2026-45639 | 高危7.5 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. | 09/06/2026 |
| CVE-2026-44801 | 高危7.5 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 09/06/2026 |
| CVE-2026-44799 | 高危7.5 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 09/06/2026 |
| CVE-2026-42992 | 高危7.5 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 09/06/2026 |
| CVE-2026-42985 | 高危8.8 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 09/06/2026 |
| CVE-2026-42909 | 高危7.5 | Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 09/06/2026 |
| CVE-2026-42908 | 高危7.5 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. | 09/06/2026 |
| CVE-2026-23656 | 中危5.9 | Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoofing over a network. | 10/03/2026 |
| CVE-2026-21517 | 高危7.0 | Improper link resolution before file access ('link following') in Windows App for Mac allows an authorized attacker to elevate privileges locally. | 10/02/2026 |
| CVE-2025-58718 | 高危8.8 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 14/10/2025 |
| CVE-2025-48817 | 高危8.8 | Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 08/07/2025 |
| CVE-2025-32715 | 中危6.5 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. | 10/06/2025 |
| CVE-2025-29966 | 高危8.8 | Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network. | 13/05/2025 |
| CVE-2025-27487 | 高危8.0 | Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network. | 08/04/2025 |
| CVE-2025-26645 | 高危8.8 | Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 11/03/2025 |
| CVE-2024-49105 | 高危8.4 | Remote Desktop Client Remote Code Execution Vulnerability | 12/12/2024 |