83 matches found
CVE-2026-70587
CVE-2026-70587 is an information disclosure vulnerability in Windows Remote Desktop Protocol (RDP) caused by improper null termination . An unauthenticated remote attacker can exploit this over a network to disclose sensitive information , with no user interaction required. The CVSS 3.1 base scor...
CVE-2026-57098
CVE-2026-57098 is an improper verification of cryptographic signature vulnerability in Windows RDP Client (Microsoft Remote Desktop App for Windows). An unauthorized network attacker can disclose information with no user interaction and no prior privileges required. The CVSS 3.1 score is 7.5 (HIG...
EUVD-2026-73176
Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network...
Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability
Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network...
Windows Remote Desktop Protocol Information Disclosure Vulnerability
Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network...
CVE-2026-57098: Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network...
PT-2026-87197
Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network...
PT-2026-87821
Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Protocol affected versions not specified Description Improper null termination in the Windows Remote Desktop Protocol allows an unauthorized attacker to disclose sensitive information over a network. Recommendations At t...
PT-2026-70427
Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations A...
PT-2026-70434
Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations A...
CVE-2026-56171: Exposure of Private Personal Information to an Unauthorized Actor
Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network...
CVE-2026-50376
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network...
PT-2026-58652
Name of the Vulnerable Software and Affected Versions Windows RDP affected versions not specified Description An out-of-bounds read occurs in Windows RDP, which allows an unauthorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information...
CVE-2026-58539: Out-of-bounds Read
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network...
CVE-2026-50376: Use of Uninitialized Resource
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network...
CVE-2026-58535: Use of Uninitialized Resource
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network...
CVE-2026-54126: Out-of-bounds Read
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network...
CVE-2026-58533: Use of Uninitialized Resource
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network...