CVE-2025-26645

{"id": "CVE-2025-26645", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "secure@microsoft.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2025-03-11T17:16:44.200", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26645", "tags": ["Vendor Advisory"], "source": "secure@microsoft.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "secure@microsoft.com", "description": [{"lang": "en", "value": "CWE-23"}, {"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network."}, {"lang": "es", "value": "El path traversal relativa en Remote Desktop Client permite que un atacante no autorizado ejecute c\u00f3digo a trav\u00e9s de una red."}], "lastModified": "2025-07-07T18:47:48.037", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "6997DE6E-CBAD-4690-A68C-8F10E477DCC2", "versionEndExcluding": "10.0.10240.20947"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "3CBCF6D9-5085-473C-82F5-98BC246A9C4C", "versionEndExcluding": "10.0.10240.20947"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "0CF0E174-4692-4AA3-B72E-12E73A1BDBE5", "versionEndExcluding": "10.0.14393.7876"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "340EF5F8-D4F5-4AD8-9D80-1DEC2F376BE5", "versionEndExcluding": "10.0.14393.7876"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "67C8DCD7-90C4-431F-BD03-FDFDE170E748", "versionEndExcluding": "10.0.17763.7009"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "05169574-28AB-4E42-B3DE-710574BB1AD3", "versionEndExcluding": "10.0.17763.7009"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83256070-991F-404C-AE4C-CBB46166CA67", "versionEndExcluding": "10.0.19044.5608"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1F779E2-8536-4B06-A151-6115C9D88D29", "versionEndExcluding": "10.0.19045.5608"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B27CE48-66A0-488B-A7B6-18A5A191AFDA", "versionEndExcluding": "10.0.22621.5039"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77DC7D9D-F85F-41B4-A944-D27B388A1157", "versionEndExcluding": "10.0.22631.5039"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84168D48-1F68-4590-98BB-E926339D1A01", "versionEndExcluding": "10.0.26100.3403"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7610CDB-A02B-4C62-B17F-6DCE2B3DE4F0", "versionEndExcluding": "10.0.14393.7876"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "273EE4B9-8B53-4387-98C8-EC5D2558DB82", "versionEndExcluding": "10.0.17763.6893"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AAACC9C4-DDC5-4059-AFE3-A49DB2347A86", "versionEndExcluding": "10.0.20348.3270"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2569319C-B855-466E-B4A5-D5774DBBD516", "versionEndExcluding": "10.0.20348.3328", "versionStartExcluding": "10.0.20348.3270"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF423F8C-2E8A-46AB-BB2D-C416BF341F92", "versionEndExcluding": "10.0.25398.1486"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF81B44C-8FF7-4C61-9974-3F98DA9D492C", "versionEndExcluding": "10.0.26100.3403"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:remote_desktop_client:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "98243CED-D25B-4F36-A101-A151A8B4D822", "versionEndExcluding": "1.2.6017"}, {"criteria": "cpe:2.3:a:microsoft:windows_app:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "2569A07D-E2CC-4AC8-B2B1-BD6FBD576004", "versionEndExcluding": "2.0.365.0"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com"}