CVE-2026-70587
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk62th percentile - higher than 62% of all known CVEs
Summary
Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
Risk Assessment
An unauthorized attacker could gain access to confidential information transmitted over RDP, potentially leading to data leakage.
Recommendation
Apply the latest Windows security updates from the vendor.
Other vulnerabilities in Windows Remote Desktop Protocol
See all- CVE-2026-50497Medium
Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
- CVE-2023-35332Medium
A vulnerability in the Windows Remote Desktop Protocol allows for a security feature bypass. An attacker can exploit this flaw to gain unauthorized access to the system.
- CVE-2021-41371Medium
Information Disclosure vulnerability in Windows Remote Desktop Protocol (RDP). Could allow an attacker to gain unauthorized access to data.
Original NVD description (English source)
Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS