Windows Remote Desktop flaws let attackers run code through client connections
Microsoft has released security updates for four Windows Remote Desktop Client vulnerabilities that can let attackers run code through network connections or local access. Published on November 10, 2026, the issues include memory handling errors and a race condition, and three of them use network attack paths while the fourth depends on existing local access. Affected Windows Remote Desktop clients Microsoft’s highest-scoring issue, CVE-2026-119934, has a CVSS score of 8.8…