This vulnerability (CWE-416) involves a use-after-free condition in the Microsoft Remote Desktop client for Windows Desktop (version 1.2.0.0). Exploitation of this flaw could allow an attacker to execute arbitrary code remotely without requiring privileges, though user interaction is required. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. An official patch is available from Microsoft as detailed in their security update guide.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely on the affected system, potentially leading to full compromise of confidentiality, integrity, and availability of the system. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft promptly to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32157 for detailed patching instructions.