[CVE-2026-42913] Concurrent execution using shared resource with improper synchronization ('race condition') in Remot…

Descripción técnica

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Puntuación CVSS

Score: 7.5/10 — Severidad: HIGH — Estado NIST: Modified

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Remote desktop client, Windows 11 23h2, Windows 11 24h2, Windows 11 25h2, Windows 11 26h1 — Microsoft

Debilidades (CWE)

CWE-362, CWE-416, CWE-787

Fuente oficial

Publicado en NIST NVD.