{"id":"CVE-2026-108458","published":"2026-10-13T19:18:05.573","lastModified":"2026-10-16T16:17:01.510","description":"Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108458","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free vulnerability in Remote Desktop Client allows attackers to execute arbitrary code remotely without authentication. This occurs when freed memory is accessed after being reallocated, potentially leading to remote code execution.","exploitability":"Exploitation requires a remote attacker to send specially crafted RDP packets to a vulnerable client, with no user interaction needed for initial exploitation.","blast_radius":"The vulnerability affects all Windows systems running Remote Desktop Client, making it highly impactful across enterprise networks where RDP is commonly used for remote access.","remediation":"Apply the latest Microsoft security update KB5042819 or upgrade to Windows 11 version 23H2 or later.","detection":"Monitor for unusual RDP protocol traffic patterns, particularly malformed packets or connection attempts from unexpected sources that may indicate exploitation attempts.","tags":["rdp","remote-execution","memory-corruption"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:55:08.049Z"}}