CVE-2026-56171

—

CVSS 3.1

7.5 high

EPSS

<1%p49

Published

Jul 17, 2026 (Jul 17, 2026)

Modified

Jul 22, 2026

Description

Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network.

Vendors: microsoft
Products: remote desktop web client, windows admin center
Weakness: CWE-359
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.