CVE-2026-103575

Summary

A use-after-free vulnerability in Remote Desktop Client allows unauthenticated attackers to execute arbitrary code on affected systems by exploiting memory management flaws when processing remote desktop connections.

Exploitability

Exploitation requires a remote attacker to send specially crafted RDP packets to a vulnerable client, with minimal preconditions beyond network access to the target system.

Blast radius

If exploited, this vulnerability could allow attackers to gain full control of affected systems, potentially leading to widespread compromise across enterprise networks where Remote Desktop is commonly used.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Apply the latest security update from Microsoft that addresses CVE-2026-103575, or upgrade to Remote Desktop Client version 10.0.22621.1849 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.