Windows Remote Desktop Protocol vulnerabilities
6 known CVE vulnerabilities in Windows Remote Desktop Protocol, translated and rated.
- CVE-2026-96322High
A use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally. The flaw results from accessing freed memory in the RDP implementation.
- CVE-2026-83861High
Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
- CVE-2026-70587High
Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
- CVE-2026-50497Medium
Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
- CVE-2023-35332Medium
A vulnerability in the Windows Remote Desktop Protocol allows for a security feature bypass. An attacker can exploit this flaw to gain unauthorized access to the system.
- CVE-2021-41371Medium
Information Disclosure vulnerability in Windows Remote Desktop Protocol (RDP). Could allow an attacker to gain unauthorized access to data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

