EUVD-2026-73087
GHSA-j66g-23ch-p523
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Network-reachable RDP listener, no credentials required pre-auth, no user interaction; information disclosure only, no integrity or availability impact.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
AnalysisAI
Information disclosure in Windows Remote Desktop Protocol (RDP) exposes sensitive memory contents to unauthenticated network attackers across a vast range of Windows Server and client editions, from Server 2012 through Server 2025 and Windows 10/11. The root cause is improper null termination (CWE-170), a memory safety defect where string buffers are read beyond their intended boundary, leaking adjacent memory to a remote caller before any authentication handshake completes. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Remote Desktop Protocol (TCP/3389) must be enabled and reachable from the attacker - the only prerequisite. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) accurately captures the key risk drivers: no authentication, no user interaction, full confidentiality impact over the network. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security updates that raise each affected build to the patched floor version listed above (e.g., Windows Server 2025 to 10.0.26100.33438, Windows 10 22H2 to 10.0.19045.7725, Windows 11 24H2 to 10.0.26100.9445). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-170 – Improper Null Termination
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today