{"id":"CVE-2026-83688","published":"2026-10-13T19:20:11.453","lastModified":"2026-10-16T16:21:16.990","description":"Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122","CWE-190"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83688","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Remote Desktop Client allows remote attackers to execute arbitrary code on affected systems. This vulnerability stems from improper bounds checking when processing remote desktop connections, potentially enabling attackers to gain full system control without authentication.","exploitability":"Exploitation is moderately difficult and requires a remote attacker to establish a malicious RDP connection with a specially crafted payload, but no user interaction is needed once the connection is established.","blast_radius":"If exploited, this vulnerability could allow attackers to compromise any system running the vulnerable Remote Desktop Client, potentially leading to full network infiltration and lateral movement across enterprise environments.","remediation":"Disable Remote Desktop Client functionality or upgrade to version 2.590 or later if available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","remote-desktop","buffer-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:58:17.604Z"}}