GCVE - cpe:2.3:a:microsoft:windows_app:*:*:*:*:*:windows:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:windows_app:*:*:*:*:*:windows:*:*

part: a version: * update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Windows App (`1f43029f-1782-502f-a80b-3d941acc280d`)
Edition	*
Language	*
Software edition	*
Target software	windows
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/microsoft/windowsappsdk`	purl2cpe	2026-06-01 10:17:05.335007

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-23656`	vulnerable	2026-06-08 07:51:15.731901	Windows App Installer Spoofing Vulnerability MEDIUM (5.9) Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoofing over a network. Published: 2026-03-10T17:05:05.497Z Updated: 2026-06-19T18:17:48.400Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23656	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58718`	vulnerable	2026-06-08 07:35:19.196350	Remote Desktop Client Remote Code Execution Vulnerability HIGH (8.8) Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Published: 2025-10-14T17:01:16.045Z Updated: 2026-02-26T17:47:05.958Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58718	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-48817`	vulnerable	2026-06-08 07:29:11.847550	Remote Desktop Client Remote Code Execution Vulnerability HIGH (8.8) Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Published: 2025-07-08T16:57:44.229Z Updated: 2026-02-26T18:27:40.415Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48817	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-32715`	vulnerable	2026-06-08 07:19:00.597666	Remote Desktop Protocol Client Information Disclosure Vulnerability MEDIUM (6.5) Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. Published: 2025-06-10T17:02:11.223Z Updated: 2026-02-20T16:00:36.317Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32715	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-29966`	vulnerable	2026-06-08 07:14:57.169396	Remote Desktop Client Remote Code Execution Vulnerability HIGH (8.8) Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network. Published: 2025-05-13T16:58:30.904Z Updated: 2026-02-13T19:20:52.298Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29966	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-27487`	vulnerable	2026-06-08 07:14:55.068686	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-26645`	vulnerable	2026-06-08 07:14:49.865646	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-49105`	vulnerable	2026-06-08 06:50:12.813197	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.