A critical security vulnerability in Microsoft Remote Desktop Client could allow attackers to execute arbitrary code on victim systems. The vulnerability, designated as CVE-2025-48817, affects multiple versions of Windows and poses significant security risks for organizations that rely on Remote Desktop Protocol (RDP) connections.

Microsoft has released comprehensive security updates addressing CVE-2025-48817 across its entire Windows ecosystem. The affected platforms span from legacy systems, including Windows Server 2008 and Windows 7, to current versions such as Windows 11 24H2 and Windows Server 2022. Specific build numbers for patched versions include 10.0.26100.4652 for Windows 11 24H2 and 10.0.22631.5624 for Windows 11 23H2. The Remote Desktop client for Windows Desktop has been updated to version 1.2.6353.0, while the Windows App Client reaches version 2.0.559.0.