Microsoft Windows RDP Out-of-Bounds Read Vulnerability Allowing Information Disclosure

A vulnerability allowing out-of-bounds read has been identified in the Windows Remote Desktop Protocol (RDP). This issue allows an unauthorized attacker to disclose information over the network, specifically local memory addresses. The vulnerability affects multiple Windows versions, including various releases of Windows 10, Windows 11, Windows Server 2012, Windows Server 2016, Windows Server 2019, Windows Server 2022, and Windows Server 2025.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure, allowing attackers to access sensitive data such as local memory addresses.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles linked in the product-specific sections.