CVE-2026-69518 – Windows Remote Desktop Remote Code Execution Vulnerability
CVSS 8.8
IMPORTANT
Critical - Same Day Deployment
“A malicious participant in a Remote Desktop sharing session could turn crafted clipboard data into code execution on the host.”
CVE-2026-69518 is a critical heap-based buffer overflow vulnerability in Windows Remote Desktop. An unauthorized attacker could join a Remote Desktop sharing session and send specially crafted clipboard data to the sharing host. Successful exploitation could execute code on the host system, potentially affecting the confidentiality, integrity, and availability of the system. The attack requires no privileges, but user interaction is required to initiate or participate in the sharing session.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- Required
- CWE Classification
- CWE-122
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.