VULNERABILITY INTELLIGENCE
CVE-2025-29966
CVSS score8.8 HIGH
EPSS probability1.43%
CISA KEVNot currently listed
Published2025-05-13
Last modified2026-06-17
Description
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
Primary references
- microsoft — vendor-advisory, patch