cve 2026 54990

The cve 2026 54990 tag covers Microsoft’s security response to a critical vulnerability in the Windows Remote Desktop Client. The reported flaw is a heap-based buffer overflow that could allow an unauthenticated attacker to execute code across a network, with a CVSS 3.1 score of 9.8. Coverage focuses on Microsoft’s July 2026 cumulative updates, including KB5101650, and the importance of timely patching for organizations whose employees or administrators regularly initiate Remote Desktop connections. The vulnerability was disclosed on July 14, 2026, and the available report states that Microsoft had not identified public disclosure or active exploitation at that time.