CVE-2026-50497
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
Risk Assessment
Risk of sensitive data leakage over the network without authentication.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Windows Remote Desktop Protocol
See all- CVE-2026-96322High
A use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally. The flaw results from accessing freed memory in the RDP implementation.
- CVE-2026-83861High
Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
- CVE-2026-70587High
Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
- CVE-2023-35332Medium
A vulnerability in the Windows Remote Desktop Protocol allows for a security feature bypass. An attacker can exploit this flaw to gain unauthorized access to the system.
- CVE-2021-41371Medium
Information Disclosure vulnerability in Windows Remote Desktop Protocol (RDP). Could allow an attacker to gain unauthorized access to data.
Original NVD description (English source)
Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS