Most Windows versions are at risk of remote, unprivileged attackers abusing RDP from the inside to hijack smart cards and get unauthorized file system access.
https://threatpost.com/windows-bug-rdp-exploit-unprivileged-users/177599/
It took just 15 seconds to hack the latest, greatest, shiniest iPhone 13 Pro on stage at the Tianfu Cup in October, using a now-fixed iOS kernel bug.
https://threatpost.com/apple-ios-updates-iphone-13-jailbreak-exploit/177051/