{"id":"CVE-2026-103575","published":"2026-10-13T19:17:53.413","lastModified":"2026-10-16T17:17:21.063","description":"Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103575","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free vulnerability in Remote Desktop Client allows unauthenticated attackers to execute arbitrary code on affected systems by exploiting memory management flaws when processing remote desktop connections.","exploitability":"Exploitation requires a remote attacker to send specially crafted RDP packets to a vulnerable client, with minimal preconditions beyond network access to the target system.","blast_radius":"If exploited, this vulnerability could allow attackers to gain full control of affected systems, potentially leading to widespread compromise across enterprise networks where Remote Desktop is commonly used.","remediation":"Apply the latest security update from Microsoft that addresses CVE-2026-103575, or upgrade to Remote Desktop Client version 10.0.22621.1849 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","rdp","remote-desktop"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:53:34.251Z"}}