CVE-2025-26645
Published: 11 March 2025
Description
Adversaries may exploit software vulnerabilities in client applications to execute code.
Security Summary
CVE-2025-26645 is a relative path traversal vulnerability in the Remote Desktop Client that allows an unauthorized attacker to execute code over a network. Published on 2025-03-11, it is linked to CWE-23 (Relative Path Traversal) and CWE-284 (Improper Access Control), with a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).
The vulnerability can be exploited by an unauthorized attacker over the network with low attack complexity and no required privileges, though it requires user interaction. Successful exploitation enables high-impact effects on confidentiality, integrity, and availability, including arbitrary code execution.
Mitigation details are provided in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26645.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise Techniques
Why these techniques?
The CVE describes a client-side remote code execution vulnerability in the Remote Desktop Client (requiring user interaction to connect over the network), which directly maps to exploitation of a client application for code execution.