PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-47654 Microsoft CVE debrief

CVE-2026-47654 is a high-severity vulnerability in the Remote Desktop Client that allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS score of 7.5 and is classified as HIGH. It was published on 2026-06-09T17:17:36.933Z and modified on 2026-06-12T17:27:29.240Z.

Vendor
Microsoft
Product
Windows Server 2016
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-09
Original CVE updated
2026-06-12
Advisory published
2026-06-09
Advisory updated
2026-06-12

Who should care

Administrators and users of Microsoft Remote Desktop Client, particularly those using Windows Server 2016, 2019, 2022, and 2025.

Technical summary

The vulnerability is a heap-based buffer overflow in the Remote Desktop Client. It requires user interaction (UI:R) and can be exploited over the network (AV:N). Successful exploitation can lead to high impact on confidentiality, integrity, and availability (C:H/I:H/A:H).

Defensive priority

High

Recommended defensive actions

  • Apply patches from Microsoft as soon as possible.
  • Limit exposure by restricting access to Remote Desktop Client.
  • Monitor for suspicious activity related to Remote Desktop Client.

Evidence notes

The vulnerability is confirmed by Microsoft and has been analyzed by NVD.

Official resources

CVE-2026-47654 was published on 2026-06-09T17:17:36.933Z and modified on 2026-06-12T17:27:29.240Z.