Microsoft Remote Desktop — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Remote Desktop, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-1669 — CVSS 8.8 (high): Windows Remote Desktop Security Feature Bypass Vulnerability
• CVE-2025-29966 — CVSS 8.8 (high): Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.