Windows App
Vendor:
First CVE: Apr 15, 2020 · Active for 6 years
18
Total CVEs
More Total CVEs than 93% of tracked products
4.5
Avg CVEs / Year
Higher CVE frequency than 86% of tracked products
7.9
Avg CVSS
Higher Avg CVSS than 68% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Windows App over time
Volume of CVEsAvg CVSS Base Score
First CVE
Apr 15, 2020
6 years ago
Most Recent CVE
Jun 9, 2026
45 days ago
CVE Severity & Scoring
Windows App18 CVEs
11%
89%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local2 (11.1%)
Network16 (88.9%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low12 (66.7%)
High6 (33.3%)
Unknown0 (0.0%)
User Interaction
None5 (27.8%)
Unknown0 (0.0%)
Required13 (72.2%)
Privileges Required
Low3 (16.7%)
High1 (5.6%)
None14 (77.8%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (18 CVEs).
18 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-47289HIGH Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Jun 9, 2026 | 8.8 | 35 | NO | NO |
CVE-2026-45639HIGH Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. | Jun 9, 2026 | 7.5 | 35 | NO | NO |
CVE-2026-42985HIGH Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Jun 9, 2026 | 8.8 | 35 | NO | NO |
CVE-2026-42908HIGH Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. | Jun 9, 2026 | 7.5 | 34 | NO | NO |
CVE-2026-42909HIGH Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Jun 9, 2026 | 7.5 | 30 | NO | NO |
CVE-2025-58718HIGH Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Oct 14, 2025 | 8.8 | 30 | NO | NO |
CVE-2026-44801HIGH Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Jun 9, 2026 | 7.5 | 28 | NO | NO |
CVE-2026-44799HIGH Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Jun 9, 2026 | 7.5 | 28 | NO | NO |
CVE-2026-42992HIGH Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Jun 9, 2026 | 7.5 | 28 | NO | NO |
CVE-2025-48817HIGH Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Jul 8, 2025 | 8.8 | 28 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (18 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (18 CVEs).
Media Mentions
Signals from CVEs in this product scope (18 CVEs).
Top CNAs Publishing CVEs For Windows App
Top CWEs
Versions
No cataloged versions.