Four Windows Remote Desktop Client flaws can execute code
The highest score is 8.8 for a double-free; one bug needs only local low privileges, not a network connection.
Stories per day · 30 days
2 RSS
Relatedmicrosoft5administrator-protection4windows-114windows2buffer-overflow1denial-of-service1freerdp1kb51240101kb51279361macos1privilege-escalation1rce1teamviewer1ubuntu1update-issue1windows-server1
11 stories, newest first · one card per story
Stories tagged #remote-desktop
Ubuntu USN-9007-1: FreeRDP flaws can leak data or run code
The notice says the issues can also crash FreeRDP; the snippet lists no CVE ids or fixed versions.
Microsoft fixes Windows 11 Remote Desktop failures for non-admins
KB5127936, out October 28, clears error 0xC000000D on hosts with Administrator protection; Windows Server is not affected.
1
Microsoft fixes Windows 11 Remote Desktop failures after recent updates
Non-admin sessions failed with error 0xC000000D on hosts using Administrator protection after the September 22 preview.
1
Microsoft fixes Remote Desktop failures after recent Windows updates
KB5127936, released October 28, restores non-admin connections that failed with error 0xC000000D when Administrator protection is enabled.
1
TeamViewer flaws before 15.83 allow code execution in sessions
Three high-severity bugs score up to 8.8, and TeamViewer reported no known active exploitation.
1
Microsoft: Recent Windows updates may trigger Remote Desktop failures
Microsoft says recent Windows 11 updates can break Remote Desktop for non-admins when Administrator protection is enabled.
2
AnyDesk Vulnerability Allowing Remote Code Execution With Root Privileges
Heap buffer overflow 'AnyPwn' in AnyDesk Linux 8.0.2 enables pre-approval remote code execution with root privileges, fixed in 8.0.3.
6
Your Windows PC can now reach other PCs through Windows App
Microsoft made remote PC connections generally available in Windows App for physical, virtual, and cloud PCs.
USN-8836-1: FreeRDP vulnerabilities
Ubuntu patched multiple FreeRDP flaws that could leak data, crash the client, or allow arbitrary code execution.
Windows Remote Desktop Client Vulnerability Allows Attackers to Execute Remote Code
Microsoft patched CVE-2026-69485, an 8.8 CVSS RCE flaw in the Windows Remote Desktop Client affecting Windows 10/11 and Server 2016-2025.
3