Microsoft Remote Desktop Client Heap-Based Buffer Overflow Vulnerability Allowing Remote Code Execution

A heap-based buffer overflow vulnerability has been identified in the Remote Desktop Client. This vulnerability allows an unauthorized attacker to execute code over a network. It is present in multiple Windows 10 and Windows 11 versions, as well as in Windows Server 2012, 2016, 2019, 2022, and 2025. The vulnerability arises when a victim connects to an attacking server using the vulnerable Remote Desktop Client, potentially leading to remote code execution on the victim's machine.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5094122, KB5094123, KB5094126, KB5093998, and KB5095051.