CVE-2026-54990Disclosure(microsoft / windows_11_24h2)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft windows_11_24h2 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

1.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-122

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • windows_11_24h2
  • windows_11_25h2
  • windows_11_26h1
  • windows_server_2025

Threat summary

  • Patch or workaround signal is available
  • 5 mentions across 5 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 4d ago at 1 mentions (2026-07-14); latest day: 1
  • 5 total mentions across 5 days

Affected systems

Vendors
Products
windows_11_24h2windows_11_25h2windows_11_26h1windows_server_2025

Deep dive

Activity timeline5 mentions / 5d
00111Mentions · 2026-07-14: 1Mentions · 2026-07-15: 1Mentions · 2026-08-11: 1Mentions · 2026-09-09: 1Mentions · 2026-10-13: 1Patch / Workaround · 2026-07-15: 1Technical Details · 2026-07-15: 1Technical Details · 2026-08-11: 1Technical Details · 2026-09-09: 107-1407-1508-1109-0910-13
Signal classification3 categories
Disclosure
250.0%
Patch
125.0%
General
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-07-141
Disclosure1
2026-07-151
Patch1
2026-08-111
Disclosure1
2026-09-091
General1
Full discourse5 posts
  • kawn@kawn2020
    General

    #windowsupdate #microsoft つづき ・CVE-2026-54990 リモート デスクトップ クライアントのリモートでコードが実行される脆弱性 ・CVE-2026-61920 Windows DNS Server Remote Code Execution Vulnerability ・CVE-2026-62714 Windows DHCP サーバーの情報漏えいの脆弱性 つづく…

    Post summary

    The post lists several upcoming CVEs with brief descriptions of their vulnerability types but provides no exploits, PoC, or mitigation details.

    10000106
    87 followersView on X
  • DailyCVE@dailycve

    🔴 #Windows 11, Heap-based Buffer Overflow, #CVE-2026-54990 (Critical) -DC-Oct2026-3147 https://dailycve.com/windows-11-heap-based-buffer-overflow-cve-2026-54990-critical-dc-oct2026-3147/

    0000027
    241 followersView on X
  • IntegSec@integ_sec
    Disclosure

    CVE-2026-54990: Remote Desktop Client Heap Buffer Overflow - What It Means for Your Business and How to Respond https://hubs.li/Q04sB58m0

    Post summary

    The content announces and describes CVE-2026-54990 as a heap buffer overflow in the Remote Desktop Client, explaining its business impact without providing specific exploit or patch information.

    0000038
    32 followersView on X
  • SecAlerts@SecAlertsCo
    Patch

    🖥️ Windows RDP Client has a critical heap overflow — CVE-2026-54990 (CVSS 9.8) lets an unauthenticated attacker execute code remotely. Affects Windows 11 & Server 2025. Patch now. #Microsoft #infosec https://secalerts.co/vulnerability/CVE-2026-54990?utm_campaign=x https://t.co/iJk9Macd8B

    Post summary

    The tweet announces a critical Windows RDP Client heap overflow (CVE‑2026‑54990) with a CVSS‑9.8 score, confirms that a patch is available, and directs readers to a vendor advisory.

    00000100
    858 followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    A severe vulnerability was disclosed for Microsoft Windows (CVE-2026-54990) https://vuldb.com/vuln/378518

    Post summary

    The tweet announces a new Windows vulnerability (CVE‑2026‑54990) without providing details on exploitation, patches, or technical specifics.

    00000109
    2.3K followersView on X
CPE platform detail7 entries

7 of 7 entries

PartVendorProductVersionTarget SWTarget HW
OSmicrosoftwindows_11_24h2--arm64
OSmicrosoftwindows_11_24h2--x64
OSmicrosoftwindows_11_25h2--arm64
OSmicrosoftwindows_11_25h2--x64
OSmicrosoftwindows_11_26h1--arm64
OSmicrosoftwindows_11_26h1--x64
OSmicrosoftwindows_server_2025---

Explore more