CVE-2026-42985Disclosure(microsoft / remote_desktop_client)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-416CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • remote_desktop_client
  • windows_10_1607
  • windows_10_1809
  • windows_10_21h2

Threat summary

  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-06-10); latest day: 1
  • 4 total mentions across 3 days

Affected systems

Vendors
Products
remote_desktop_clientwindows_10_1607windows_10_1809windows_10_21h2windows_10_22h2windows_11_23h2windows_11_24h2windows_11_25h2windows_11_26h1windows_app

2 versions affected across 15 products

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-06-09: 1Mentions · 2026-06-10: 2Mentions · 2026-07-03: 1Technical Details · 2026-06-10: 206-0906-1007-03
Signal classification2 categories
Disclosure
250.0%
General
250.0%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-06-091
Disclosure1
2026-06-102
Disclosure1General1
2026-07-031
General1
Full discourse4 posts
  • kawn@kawn2020
    General

    #windowsupdate #microsoft つづき ・CVE-2026-42985 8.8 リモート デスクトップ クライアント ・CVE-2026-42986 7.8 Microsoft Graphics コンポーネント ・CVE-2026-42989 7.8 Winlogon ・CVE-2026-44803 7.8 Windows Win32K: GRFX ・CVE-2026-44812 7.8 Windows Win32K: GRFX つづく…

    Post summary

    The tweet enumerates a set of Windows CVEs with their scores and affected components, but does not provide evidence of exploitation, patches, or PoC details.

    1001087
    85 followersView on X
  • Martin Bengtsson@mwbengtsson
    Disclosure

    3/ CVE-2026-42985 - RDP Client - CVSS 8.8 Connect to a rogue RDP server → attacker runs code on your machine. All supported Windows. Microsoft: "Exploitation More Likely."

    Post summary

    The tweet discloses CVE‑2026‑42985, noting that connecting to a rogue RDP server can lead to remote code execution on all supported Windows systems, with a CVSS score of 8.8, and warns that exploitation is likely.

    10000340
    4.3K followersView on X
  • IntegSec@integ_sec
    General

    CVE-2026-42985: Microsoft Remote Desktop Client Buffer Overflow - What It Means for Your Business and How to Respond https://hubs.li/Q04nvW3J0

    Post summary

    The text links to a general article about CVE‑2026‑42985, a Microsoft Remote Desktop Client buffer overflow, but provides no technical, exploitation, or mitigation details.

    0000041
    32 followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    There is a new vulnerability with elevated criticality in Microsoft Windows (CVE-2026-42985) https://vuldb.com/vuln/369631

    Post summary

    A new Windows CVE (CVE‑2026-42985) with elevated criticality has been reported, but the text contains no additional technical, exploit, or remediation details.

    0000040
    2.2K followersView on X
CPE platform detail26 entries

26 of 26 entries

PartVendorProductVersionTarget SWTarget HW
Appmicrosoftremote_desktop_client-windows-
OSmicrosoftwindows_10_1607--x64
OSmicrosoftwindows_10_1607--x86
OSmicrosoftwindows_10_1809--x64
OSmicrosoftwindows_10_1809--x86
OSmicrosoftwindows_10_21h2--arm64
OSmicrosoftwindows_10_21h2--x64
OSmicrosoftwindows_10_21h2--x86
OSmicrosoftwindows_10_22h2--arm64
OSmicrosoftwindows_10_22h2--x64
OSmicrosoftwindows_10_22h2--x86
OSmicrosoftwindows_11_23h2--arm64
OSmicrosoftwindows_11_23h2--x64
OSmicrosoftwindows_11_24h2--arm64
OSmicrosoftwindows_11_24h2--x64
OSmicrosoftwindows_11_25h2--arm64
OSmicrosoftwindows_11_25h2--x64
OSmicrosoftwindows_11_26h1--arm64
OSmicrosoftwindows_11_26h1--x64
Appmicrosoftwindows_app-windows-
OSmicrosoftwindows_server_2012---
OSmicrosoftwindows_server_2012r2--
OSmicrosoftwindows_server_2016---
OSmicrosoftwindows_server_2019---
OSmicrosoftwindows_server_2022---
OSmicrosoftwindows_server_2025--x64

Explore more