CVE-2026-58539
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
Risk Assessment
Risk of sensitive data leakage over the network without authentication.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Windows RDP
See all- CVE-2026-56190Critical
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network.
- CVE-2026-56171High
Vulnerability in Windows RDP allows an unauthorized attacker to disclose private personal information over a network. The attacker can intercept data transmitted during an RDP session.
- CVE-2026-58594High
Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network.
- CVE-2026-58546Medium
Uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
- CVE-2026-58535Medium
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
- CVE-2026-58533Medium
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
- CVE-2026-57982Medium
Use of uninitialized resource in Windows RDP allows an authenticated attacker to disclose information over a network.
- CVE-2026-54126Medium
An out-of-bounds read vulnerability exists in Windows RDP. An unauthorized attacker can exploit this to disclose information remotely over the network.
- CVE-2026-50445Medium
A buffer over-read vulnerability exists in Windows RDP. An unauthorized attacker can exploit this to disclose information remotely over the network.
- CVE-2026-50376Medium
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
Original NVD description (English source)
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

