CVE-2026-102198
MediumCVSS 5.3Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.
Risk Assessment
Risk includes potential leakage of sensitive data from system memory, compromising confidentiality.
Recommendation
Update Windows and restrict access to RDP services.
Other vulnerabilities in Windows Remote Desktop Protocol
See all- CVE-2026-96322High
A use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally. The flaw results from accessing freed memory in the RDP implementation.
- CVE-2026-83861High
Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
- CVE-2026-70587High
Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
- CVE-2026-50497Medium
Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
- CVE-2023-35332Medium
A vulnerability in the Windows Remote Desktop Protocol allows for a security feature bypass. An attacker can exploit this flaw to gain unauthorized access to the system.
- CVE-2021-41371Medium
Information Disclosure vulnerability in Windows Remote Desktop Protocol (RDP). Could allow an attacker to gain unauthorized access to data.
Original NVD description (English source)
Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS