Out‑of‑bounds read in the Windows Remote Desktop Client allows an unauthorized attacker to read sensitive data over a network connection. The flaw is a classic memory corruption issue (CWE‑125) that results in disclosure of information. The attacker can obtain data that should otherwise remain confidential, such as credentials or other data transmitted during an RDP session, thereby compromising confidentiality. No integrity or availability impact is indicated in the current description.

This vulnerability affects multiple Microsoft Windows operating systems, including Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1; and Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025—including their Server Core installations.

The CVSS score of 6.5 places the vulnerability in the medium severity range. With no EPSS score available and absence from the CISA KEV catalog, the likelihood of active exploitation appears low, although the attack vector is remote. An attacker who can direct traffic to the vulnerable Remote Desktop Client could exploit the out‑of‑bounds read to gain access to sensitive data. Therefore, administrative vigilance and timely patching remain important.