← Database

CVE-2026-42913

HIGH CVSS: 7.5 Published: 2026-06-09 Modified: 2026-07-23

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Affected Platforms

Microsoft Windows 11 24H2Microsoft Windows 11 23H2Microsoft Windows Server 2025Microsoft Remote Desktop ClientMicrosoft Windows Server 2022Microsoft Windows 11 25H2Microsoft Windows 11 26H1

Weakness Type

CWE-362, CWE-416, CWE-362, CWE-787

References