CVE-2026-42908NVD

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

Severity Level

HIGH(7.5)

Published Date

Jun 9, 2026

Last Modified

Jun 9, 2026

Exploitation Status

????

EPSS Score (30-Day)

0.08%Probability

Root Weakness (CWE)

The software reads data past the end, or before the beginning, of the intended buffer.

CVSS v3.1 Base Metrics

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityNone

AvailabilityNone

CVE Watchtower