This vulnerability (CVE-2026-32157) involves a use-after-free condition in the Microsoft Remote Desktop client for Windows Desktop. Exploitation of this flaw could allow an attacker to execute arbitrary code remotely without requiring privileges, with user interaction needed. The vulnerability is rated high severity with a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Microsoft has released an official fix to remediate this issue.

Successful exploitation could lead to remote code execution by an unauthorized attacker, potentially compromising the affected system's confidentiality, integrity, and availability. The attack requires user interaction but no privileges or prior authentication.

An official fix is available from Microsoft. Users and administrators should apply the provided security update from the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32157 to remediate this vulnerability.