CVE-2026-56190

CVE-2026-56190 is a Windows Remote Desktop Protocol vulnerability described as a use of an uninitialized resource in Windows RDP that allows an unauthenticated attacker to execute code over the network. The CVE has a very high severity (CVSSv3.1 base score 9.8, CRITICAL) and is referenced in Micr...

CVE-2026-54126

CVE-2026-54126 is a Windows RDP information-disclosure vulnerability (out-of-bounds read). It is triggered over the network and requires user interaction, with no privileges required by the attacker; impact is disclosure of confidential information. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C...

CVE-2026-54126 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

...

CVE-2026-54126 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

...

EUVD-2026-44150

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network...

CVE-2026-50692 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2026-50692 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2026-50692

CVE-2026-50692 is a Windows vulnerability in Desktop Window Manager (DWM): a heap-based buffer overflow that enables local privilege escalation by an authorized, low-privilege user with no user interaction. Public sources confirm the issue and Microsoft has released updates to address it; affecte...

EUVD-2026-44148

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-50504 Windows Remote Desktop Client Information Disclosure Vulnerability

...

CVE-2026-50504 Windows Remote Desktop Client Information Disclosure Vulnerability

...

CVE-2026-50504

CVE-2026-50504 is a buffer over-read affecting the Windows Remote Desktop Client that can disclose information to an unauthenticated, network-attached attacker. The description and linked CVE entries consistently indicate the underlying issue is a buffer over-read in the Remote Desktop Client, en...

CVE-2026-50497

CVE-2026-50497 is an off-by-one error in Windows Remote Desktop Protocol that allows an unauthenticated network attacker to disclose information. Public sources in the provided documents identify the affected component as RDP and describe a network-triggered information disclosure, without detail...

CVE-2026-50497 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

...

CVE-2026-50497 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

...

CVE-2026-50474 Remote Desktop Client Remote Code Execution Vulnerability

...

CVE-2026-50474 Remote Desktop Client Remote Code Execution Vulnerability

...

CVE-2026-50474

CVE-2026-50474 is a Remote Desktop Client vulnerability described as a use-after-free that allows an unauthenticated attacker to execute code over a network. The affected component is the Remote Desktop Client; the root cause is use-after-free in the client handling of remote sessions. The CVE is...

CVE-2026-50369 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2026-50369

CVE-2026-50369 is a Windows Remote Desktop Services vulnerability identified as a use-after-free that enables an authorized attacker to elevate privileges over the network. The initial entry and multiple connected sources describe the issue consistently and confirm the affected component as Windo...