Microsoft Windows RDP Out-of-Bounds Read Vulnerability Allowing Information Disclosure

A vulnerability allowing out-of-bounds read has been identified in Windows Remote Desktop Protocol (RDP). This issue allows an unauthorized attacker to disclose information over the network by reading portions of process memory. The vulnerability affects multiple Windows products, including various versions of Windows Server, Windows 10, Windows 11, and the Remote Desktop client for Windows Desktop.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure by allowing attackers to read sensitive data from process memory.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles linked within the product update guidance.