Is CVE-2026-103575 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-103575 being exploited in the wild.

How severe is CVE-2026-103575?

High severity, with a CVSS score of 8.8, published 13 October 2026.

Is there a fix for CVE-2026-103575?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-103575 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-103575?

Check whether you run Microsoft Remote Desktop Client at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-103575: Microsoft Remote Desktop Client use-after-free remote code execution

CVE-2026-103575 · Severity: high · CVSS 8.8 · Published 2026-10-13

Microsoft Remote Desktop Client, a tool used to connect to remote computers, contains a use-after-free vulnerability that allows an attacker to execute arbitrary code on a user's system over a network without authentication. An attacker can exploit this to gain complete control over the affected computer, potentially leading to data theft, malware installation, or lateral movement within a network.

Technologies: Microsoft Remote Desktop Client. Vendors: Microsoft.

Quick answers

Is CVE-2026-103575 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-103575 being exploited in the wild.
How severe is CVE-2026-103575?: High severity, with a CVSS score of 8.8, published 13 October 2026.
Which products and versions are affected?: Microsoft Remote Desktop Client <UNKNOWN>.
Is there a fix for CVE-2026-103575?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-103575 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-103575?: Check whether you run Microsoft Remote Desktop Client at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A use-after-free vulnerability in the Remote Desktop Client memory management allows an unauthenticated network attacker to trigger code execution by sending specially crafted network packets. The vulnerability requires network access to a system running the vulnerable client but does not require prior authentication or user interaction. Successful exploitation results in arbitrary code execution with the privileges of the user running the Remote Desktop Client.

Affected products

Microsoft Remote Desktop Client <UNKNOWN>

Timeline

2026-10-13: disclosed

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103575

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.