Remote Desktop Client Use-After-Free Remote Code Execution

CVE-2026-32157 is a critical remote code execution vulnerability in Microsoft Remote Desktop Client caused by a use-after-free condition. The flaw can be triggered when the client connects to a malicious Remote Desktop server, leading to unsafe reuse of freed memory within the client process. Microsoft’s April 2026 security updates identify this as a network-reachable client-side issue: exploitation is performed by an unauthorized attacker operating a malicious server, but successful exploitation requires an authenticated/authorized user on the vulnerable client to initiate a connection to that server. If successfully exploited, the vulnerability can result in arbitrary code execution on the client system.