microsoft remote desktop client

Name: microsoft remote desktop client
Brand: microsoft

productUS

cpe:2.3:a:microsoft:remote_desktop_client:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical7high6medium0low

updated 2026-10-28

vulnerabilities (30)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-0887US	high8.0	71.0% (99th)	Exploit	1.2.2691	2019-07-15	< 1.2.2691
CVE-2022-22017US	high9.3	37.1% (99th)	—	no fix	2022-05-10	—
CVE-2021-34535US	medium6.8	21.9% (98th)	—	no fix	2021-08-12	—
CVE-2021-38665US	medium4.3	7.02% (94th)	—	1.2.2677	2021-11-10	1.2.1672 → 1.2.2677
CVE-2021-1669US	medium6.5	3.20% (88th)	—	no fix	2021-01-12	—
CVE-2025-26645US	—	3.18% (88th)	—	1.2.6017	2025-03-11	< 1.2.6017
CVE-2022-26940US	medium4.0	2.68% (86th)	—	no fix	2022-05-10	—
CVE-2022-22015US	medium4.0	2.68% (86th)	—	no fix	2022-05-10	—
CVE-2022-24503US	medium5.0	2.44% (84th)	—	1.2.2925	2022-03-09	< 1.2.2925
CVE-2023-28267US	—	2.09% (82nd)	—	1.2.4157	2023-04-11	< 1.2.4157
CVE-2024-49105US	—	1.53% (75th)	—	1.2.5716.0	2024-12-12	< 1.2.5716.0
CVE-2025-27487US	—	1.49% (74th)	—	1.2.6081	2025-04-08	< 1.2.6081
CVE-2025-32715US	—	1.44% (73rd)	—	1.2.6278	2025-06-10	< 1.2.6278
CVE-2023-29362US	—	1.35% (71st)	—	1.2.4337	2023-06-14	< 1.2.4337
CVE-2024-38131US	—	1.32% (71st)	—	1.2.5560.0	2024-08-13	< 1.2.5560.0
CVE-2026-42985US	—	1.26% (70th)	—	1.2.7214	2026-06-09	< 1.2.7214
CVE-2023-29352US	—	1.17% (67th)	—	1.2.4337	2023-06-14	< 1.2.4337
CVE-2025-48817US	—	1.14% (67th)	—	1.2.6353	2025-07-08	< 1.2.6353
CVE-2022-41121US	high7.8	1.12% (66th)	—	no fix	2022-12-13	—
CVE-2026-45639US	—	0.87% (59th)	—	1.2.7214	2026-06-09	< 1.2.7214
CVE-2026-78463US	high8.8	0.86% (58th)	—	1.2.7279	2026-09-08	< 1.2.7279
CVE-2026-80077US	high8.8	0.82% (57th)	—	1.2.7279	2026-09-08	< 1.2.7279
CVE-2026-80074US	high8.8	0.82% (57th)	—	1.2.7279	2026-09-08	< 1.2.7279
CVE-2026-32157US	—	0.78% (56th)	—	2.0.1070.0	2026-04-14	< 2.0.1070.0
CVE-2026-57098US	high7.5	0.64% (50th)	—	1.2.7279	2026-09-08	< 1.2.7279
CVE-2025-58718US	—	0.60% (48th)	—	1.2.6599	2025-10-14	< 1.2.6599
CVE-2026-42913US	—	0.47% (41st)	—	1.2.7214	2026-06-09	< 1.2.7214
CVE-2026-44801US	—	0.46% (40th)	—	1.2.7214	2026-06-09	< 1.2.7214
CVE-2026-44799US	—	0.46% (40th)	—	1.2.7214	2026-06-09	< 1.2.7214
CVE-2026-42909US	—	0.40% (34th)	—	1.2.7214	2026-06-09	< 1.2.7214

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free6 CVEs
CWE-122Heap-based Buffer Overflow5 CVEs
CWE-787Out-of-bounds Write5 CVEs
CWE-125Out-of-bounds Read3 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-284Improper Access Control3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-23Relative Path Traversal2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE30 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan