CVE-2026-85337
MediumCVSS 6.5Summary
An out-of-bounds read vulnerability in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. The issue involves improper reading beyond buffer boundaries.
Risk Assessment
An unauthenticated remote attacker may cause memory data leakage from the RDP client. This can result in disclosure of sensitive information.
Recommendation
Apply Microsoft security updates for Remote Desktop Client. Avoid connecting to untrusted RDP servers.
Other vulnerabilities in Remote Desktop Client
See all- CVE-2026-97789High
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-83688High
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-70012High
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-70006High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-70004High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69998High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69997High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69996High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69995High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
- CVE-2026-69994High
A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.
Original NVD description (English source)
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS