EUVD-2026-73285
GHSA-h4c5-rp5p-jrmp
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Network delivery to a client-side parser, no attacker auth required, but victim must connect to malicious server (UI:R); no C or I impact confirmed.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.
AnalysisAI
Remote Desktop Client on Windows crashes with a denial-of-service condition when a user connects to an attacker-controlled RDP server that triggers a CWE-190 integer overflow or wraparound in the client parsing logic. The flaw affects at least fifteen distinct Windows releases, spanning Windows 10 1607 through Windows 11 26H1 and every Windows Server generation from 2016 through 2025. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The victim must actively initiate an RDP client connection to an attacker-controlled server - this is the mandatory user interaction (UI:R) condition encoded in the CVSS vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Real-world priority for this vulnerability is moderate. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the cumulative update for the relevant Windows release to reach or exceed the fixed build listed in the EUVD affected-version data (e.g., 10.0.26100.33438 for Windows Server 2025, 10.0.22631.7582 for Windows 11 23H2). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-190 – Integer Overflow or Wraparound
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today