What is the CVSS score of EUVD-2026-56676?

EUVD-2026-56676 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.6%.

Which versions of Remote Desktop Client are affected by EUVD-2026-56676?

A remote code execution vulnerability in Microsoft Remote Desktop Client (CVE-2026-62824, CVSS 8.8) threatens organizations relying on RDP for remote workforce access, particularly those managing…. A patch is available.

How to fix or mitigate EUVD-2026-56676?

Within 24 hours, conduct an inventory of all Windows 10 1607, Windows Server 2012, and Windows Server 2016 systems with RDP enabled, prioritizing internet-facing or DMZ-adjacent infrastructure and flagging systems still in use. Within 7 days, apply Microsoft's released patches to all affected systems, beginning with high-value targets and completing all patches within this window; verify patch deployment through automated compliance scanning. Within 30 days, conduct post-remediation validation, implement additional hardening such as network segmentation for RDP access, deploy multi-factor authentication at RDP gateways, and consider restricting RDP to specific internal networks and IP ranges to reduce attack surface.

Remote Desktop Client EUVD-2026-56676

| CVE-2026-62824 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-08-11 secure@microsoft.com

GHSA-88r4-hmx3-g273

Buffer Overflow Microsoft Stack Overflow Windows 10 1607 Windows Server 2012 Windows Server 2016

8.8

CVSS 3.1 · Vendor: microsoft

Severity by source

Vendor (microsoft) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

vuln.today AI

8.8 HIGH

Network-delivered client-side RCE with no attacker privileges; user must initiate connection (UI:R); scope unchanged; full C/I/A impact from code execution.

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (microsoft).

CVSS VectorVendor: microsoft

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 11, 2026 - 19:11 vuln.today

Patch available

Aug 11, 2026 - 18:19 EUVD

CVE Published

Aug 11, 2026 - 17:18 nvd

HIGH 8.8

DescriptionCVE.org

Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

AnalysisAI

Stack-based buffer overflow in Microsoft's Remote Desktop Client (mstsc.exe) enables remote code execution on unpatched Windows 10 1607 and Windows Server 2012/2016 systems. The CVSS vector (AV:N/AC:L/PR:N/UI:R) confirms the attack is network-delivered and requires no attacker privileges, but demands that a victim actively connect to an attacker-controlled RDP server - a meaningful but achievable social-engineering hurdle. Microsoft has released patches for all affected version branches; no public exploit identified at time of analysis.

Technical ContextAI

The affected component is the Windows Remote Desktop Protocol client library responsible for processing server-to-client data during RDP session negotiation and rendering. CWE-121 (Stack-based Buffer Overflow) identifies the root cause: attacker-controlled data received from a malicious RDP server exceeds a fixed-size stack buffer during parsing, overwriting adjacent stack frames including the saved return address. This gives the attacker control of the instruction pointer, enabling arbitrary code execution in the security context of the RDP client process. Because the flaw is client-side, the attacker's server is the exploit delivery mechanism - the victim's machine is the target. Affected CPE-level products span Windows NT 6.2/6.3 (Server 2012/R2) and Windows NT 10.0 build 14393 (Server 2016 / Windows 10 1607), as reported by ENISA EUVD-2026-56676.

RemediationAI

Apply the vendor-released patch via Windows Update or the MSRC advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62824. Patch available per vendor advisory with the following target fixed versions derived from EUVD affected-version ranges: Windows Server 2012/Server Core to build 6.2.9200.26279 or later; Windows Server 2012 R2/Server Core to build 6.3.9600.23337 or later; Windows Server 2016/Server Core and Windows 10 Version 1607 to build 10.0.14393.9418 or later. Where immediate patching is not feasible, enforce outbound RDP egress filtering at the network perimeter to block client-initiated connections to external or untrusted RDP servers (TCP/UDP 3389) - note this will break legitimate remote-access workflows requiring external RDP targets. Additionally, deploy Group Policy to restrict which servers the Remote Desktop client is permitted to connect to, and train users to avoid connecting to unsolicited RDP invitations or opening .rdp files from untrusted sources.