Remote code execution via heap overflow

Heap-based buffer overflow in Microsoft Remote Desktop Client before the August 2026 Windows security updates allows remote attackers to execute code via RDP traffic. Microsoft's public record does not identify the vulnerable parser, function, or field handling; it discloses only that attacker-controlled network data can be written past a heap buffer boundary in the client. The CNA metrics assign network reachability with required user interaction and high attack complexity, so exposure depends on driving the client against attacker-controlled Remote Desktop content, with no public evidence of active exploitation.