CVE-2026-70004
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
Risk Assessment
This vulnerability enables remote code execution without authentication, potentially leading to system compromise. The risk affects workstations connecting to untrusted RDP servers.
Recommendation
Immediately apply security updates for the Remote Desktop Client. It is also advisable to avoid connecting to untrusted RDP servers until patches are deployed.
Other vulnerabilities in Remote Desktop Client
See all- CVE-2026-54990Critical
A heap-based buffer overflow in the Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2021-38666High
Remote Code Execution vulnerability in Remote Desktop Client. Details are not provided in the description.
- CVE-2021-34535High
Remote code execution vulnerability in Remote Desktop Client. An attacker could exploit this to execute code remotely on the client machine.
- CVE-2026-97789High
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-85337Medium
An out-of-bounds read vulnerability in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. The issue involves improper reading beyond buffer boundaries.
- CVE-2026-83688High
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-70012High
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-70006High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69998High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69997High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
Original NVD description (English source)
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS