PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-44799 Microsoft CVE debrief

CVE-2026-44799 is a heap-based buffer overflow vulnerability in Microsoft Remote Desktop Client. The vulnerability has a CVSS score of 7.5 and is classified as HIGH severity. An unauthorized attacker can exploit this vulnerability to execute code over a network.

Vendor
Microsoft
Product
Remote Desktop client for Windows Desktop
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-09
Original CVE updated
2026-06-15
Advisory published
2026-06-09
Advisory updated
2026-06-15

Who should care

Administrators and users of Microsoft Remote Desktop Client, particularly those in environments where Remote Desktop Client is used to connect to untrusted or internet-facing networks.

Technical summary

The vulnerability is caused by a heap-based buffer overflow in Microsoft Remote Desktop Client. This allows an attacker to execute arbitrary code on the affected system.

Defensive priority

High

Recommended defensive actions

  • Apply patches from Microsoft as soon as possible.
  • Limit exposure of Remote Desktop Client to untrusted or internet-facing networks.
  • Use secure connections and authenticate users before allowing access.

Evidence notes

The CVE record and details are sourced from official databases.

Official resources

CVE-2026-44799 was published on 2026-06-09T17:17:15.643Z and modified on 2026-06-15T20:04:08.410Z.