PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-47289 Microsoft CVE debrief

CVE-2026-47289 is a high-severity vulnerability in the Remote Desktop Client, allowing unauthorized attackers to execute code over a network. The vulnerability has a CVSS score of 8.8 and is classified as HIGH. It was published on 2026-06-09T17:17:34.453Z and modified on 2026-06-12T17:39:08.270Z.

Vendor
Microsoft
Product
Windows 10 Version 1607
CVSS
HIGH 8.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-09
Original CVE updated
2026-06-12
Advisory published
2026-06-09
Advisory updated
2026-06-12

Who should care

Administrators and users of Microsoft Windows App, Windows 10, Windows 11, and Windows Server are advised to take action.

Technical summary

The vulnerability is a heap-based buffer overflow in the Remote Desktop Client, which allows an unauthorized attacker to execute code over a network. The vulnerability affects multiple versions of Windows 10, Windows 11, and Windows Server.

Defensive priority

HIGH

Recommended defensive actions

  • Apply patches and updates from Microsoft as soon as possible.
  • Use secure communication protocols and authenticate users before allowing access to sensitive resources.
  • Monitor network traffic and system logs for suspicious activity.

Evidence notes

The vulnerability is confirmed by Microsoft and has been analyzed by the National Vulnerability Database (NVD).

Official resources

CVE-2026-47289 was published on 2026-06-09T17:17:34.453Z and modified on 2026-06-12T17:39:08.270Z.