NetSight
high7.0

CVE-2025-58737

Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally.

Impact

Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally.

Affected products

VendorProductAffected versions
MicrosoftWindows Server 2012
Version r2
MicrosoftWindows Server 2016
through 10.0.14393.8519
MicrosoftWindows Server 2019
before 10.0.17763.7919
MicrosoftWindows Server 2022
before 10.0.20348.4294
MicrosoftWindows Server 2022 23h2
before 10.0.25398.1913
MicrosoftWindows Server 2025
through 10.0.26100.6899

Weakness classification

References