Description
Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network.
Severity (CVSS)
| Base score | 7.1 |
|---|---|
| Severity | High |
| Version | CVSS 3.1 |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C |
| Provided by | CNA |
Weaknesses
- CWE-359 — CWE-359: Exposure of Private Personal Information to an Unauthorized Actor
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Remote Desktop Web Client | 2.0.0.0 to <2.1.65.2 |
| Microsoft | Windows Admin Center | 1809.0 to <2.7.4 |
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56171 (vendor-advisory patch)
Generated from the official CVE List on 18 Jul 2026 07:00 UTC.