Microsoft Remote Desktop Client Relative Path Traversal Remote Code Execution Vulnerability

A relative path traversal vulnerability has been identified in the Microsoft Remote Desktop Client. This issue allows an unauthorized attacker to execute code on the victim's machine over the network. The vulnerability arises when a Remote Desktop client connects to a malicious server, potentially leading to remote code execution on the client side.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Reproduction

To reproduce this vulnerability, an admin user must connect to a malicious Remote Desktop server using a vulnerable version of the Remote Desktop Client. This connection will trigger the remote code execution on the client's machine.

Remediation

Users can apply the security update KB5053596 to address this vulnerability. This update is available through the Microsoft Update Catalog.