CVE Catalog
CVE-2026-50497
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk0.87%
55th percentile - higher than 55% of all known CVEs
Summary
Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
Risk Assessment
Risk of sensitive data leakage over the network without authentication.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Windows Remote Desktop Protocol
See all- CVE-2023-35332Medium
A vulnerability in the Windows Remote Desktop Protocol allows for a security feature bypass. An attacker can exploit this flaw to gain unauthorized access to the system.
- CVE-2021-41371Medium
Information Disclosure vulnerability in Windows Remote Desktop Protocol (RDP). Could allow an attacker to gain unauthorized access to data.
Original NVD description (English source)
Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.