EUVD-2026-73299
GHSA-pgp6-8xfj-whr8
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Network-delivered with no auth required from attacker; UI:R because victim must actively connect to malicious server; full CIA impact on client host.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
AnalysisAI
Code injection in Microsoft Remote Desktop Client for Windows Desktop (versions 1.2.0.0 through below 1.2.7279.0) enables an unauthenticated network attacker to execute arbitrary code on the connecting client machine. The vulnerability is triggered when a user connects to an attacker-controlled RDP server that delivers malicious server-side responses exploiting CWE-94 code generation flaws in the client. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The victim must be running an unpatched Remote Desktop Client for Windows Desktop (versions 1.2.0.0 through below 1.2.7279.0) and must actively initiate or be redirected to connect to an attacker-controlled RDP server. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.8 score reflects high CIA impact with a low-complexity network vector, tempered by UI:R (user must actively connect to a malicious server). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Update the Remote Desktop Client for Windows Desktop to version 1.2.7279.0 or later, available through the Microsoft Store or via the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78463. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all Windows systems running Microsoft Remote Desktop Client and inventory versions 1.2.0.0 through 1.2.7278.x in your endpoint management system. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-94 – Code Injection
View allShare
External POC / Exploit Code
Leaving vuln.today