Windows Remote Desktop Client Information Disclosure Vulnerability
MonitorCVSS 6.5CVE-2026-85337Oct 13, 2026
Microsoft
IT in OT - Windows Server and Active Directory are widely deployed in OT environments
Attack path
Attack VectorNetwork
Auth RequiredNone
ComplexityLow
User InteractionRequired
Summary
An out-of-bounds read vulnerability in Remote Desktop Client allows an attacker to disclose memory contents over a network. The vulnerability requires user interaction with a malicious RDP connection or content. Affects Windows 10 (versions 1607, 1809, 21H2, 22H2), Windows 11 (versions 23H2, 24H2, 25H2, 26H1, 26H2), Windows Server 2016, 2019, 2022, and 2025.
What this means
What could happen
An attacker could trigger an out-of-bounds memory read in the Remote Desktop Client to view sensitive information from an affected Windows system's memory, potentially exposing credentials or configuration data.
Who's at risk
Windows system administrators and IT staff managing Windows 10, Windows 11, Windows Server 2016, Server 2019, Server 2022, and Server 2025 systems that use Remote Desktop Client for remote administration or support.
How it could be exploited
An attacker would need to interact with a user on the target system who opens a malicious RDP connection or file. When the user connects via Remote Desktop Client or processes certain RDP data, the out-of-bounds read could expose memory contents to the attacker over the network.
Prerequisites
- User must interact with a malicious RDP connection or content
- Remote Desktop Client must be installed and in use
- Network access to reach the target system
remotely exploitablerequires user interactionlow complexitymemory disclosure
Exploitability
Unlikely to be exploited — EPSS score 0.9%
Affected products (28)
28 with fix
ProductAffected VersionsFix Status
Remediation & Mitigation
0/1
Schedule — requires maintenance window
0/1Patching may require device reboot — plan for process interruption
HOTFIXApply the 2026-Oct Windows security update to your Windows 10, Windows 11, and Windows Server systems
CVEs (1)
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/01d3a627-4077-49b9-8c5b-52709ee08eb0Get OTPulse briefings by email
Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.