Executive brief
A security vulnerability exists in the Windows Remote Desktop Protocol (RDP), which is used to remotely access and manage computers over a network. An unauthorized attacker could exploit this flaw to access sensitive information from the system's memory without needing any login credentials. This could lead to the exposure of confidential data or help an attacker plan further intrusions into the corporate network.
Technical details
An out-of-bounds read vulnerability (CWE-125) exists in the Microsoft Windows Remote Desktop Protocol (RDP) implementation. The flaw is triggered when the RDP service improperly handles specially crafted network packets, allowing an attacker to read data beyond the intended buffer. This is a network-based attack that requires no authentication (PR:N) and no user interaction (UI:N). Successful exploitation results in the unauthorized disclosure of information from the process memory, which may contain sensitive system or user data. Microsoft has released security updates to address this issue via the MSRC Update Guide.
Affected products
- Microsoft Windows Remote Desktop Protocol (RDP)
Timeline
- 2026-06-09: disclosed: Initial publication of the CVE record.
- 2026-06-09: advisory: Microsoft released the security update guide for this vulnerability.