This vulnerability, tracked as CVE-2026-42993, involves a heap-based buffer overflow in the Remote Desktop Client on Windows 10 Version 21H2 (build 10.0.19044.0). Exploitation could allow an attacker to execute arbitrary code remotely without privileges, though user interaction is required. The vulnerability has been assigned a CVSS 3.1 base score of 7.5, indicating high severity. Microsoft has released an official fix to remediate this issue, as documented in their security update guide.

Successful exploitation of this vulnerability could lead to remote code execution with high impact on confidentiality, integrity, and availability of the affected system. The attacker does not require privileges but does require user interaction. This could allow compromise of the affected Windows 10 system via the Remote Desktop Client.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 21H2 (build 10.0.19044.0) as soon as possible to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42993 for detailed patch information and update instructions.