PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-44801 Microsoft CVE debrief

CVE-2026-44801 is a high-severity vulnerability in the Remote Desktop Client that allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS score of 7.5 and is classified as HIGH. It was published on 2026-06-09T17:17:15.827Z and modified on 2026-06-12T17:20:04.780Z.

Vendor
Microsoft
Product
Remote Desktop client for Windows Desktop
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-09
Original CVE updated
2026-06-12
Advisory published
2026-06-09
Advisory updated
2026-06-12

Who should care

Users of Microsoft Remote Desktop Client and Windows operating systems should be aware of this vulnerability and take necessary precautions.

Technical summary

The vulnerability is a heap-based buffer overflow in the Remote Desktop Client, which allows an attacker to execute code over a network. The vulnerability affects multiple versions of Windows, including Windows 10, Windows 11, and Windows Server.

Defensive priority

High

Recommended defensive actions

  • Apply patches and updates from Microsoft as soon as possible.
  • Use secure communication protocols and encryption when accessing remote desktop services.
  • Limit access to remote desktop services to only those who need it.

Evidence notes

The vulnerability is confirmed by Microsoft and has been assigned a CVE ID. The CVSS score and vector are based on the official CVE record.

Official resources

CVE-2026-44801 was published on 2026-06-09T17:17:15.827Z and modified on 2026-06-12T17:20:04.780Z.