What is the CVSS score of EUVD-2026-35683?

EUVD-2026-35683 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Which versions of Windows RDP are affected by EUVD-2026-35683?

A critical unauthenticated information disclosure vulnerability in Microsoft Windows Remote Desktop Protocol (CVE-2026-45639, CVSS 7.5) allows attackers to steal sensitive data from RDP service…. A patch is available.

How to fix or mitigate EUVD-2026-35683?

Within 24 hours: conduct network inventory of exposed RDP endpoints and restrict access via firewall rules to trusted networks only; within 7 days: implement network segmentation to isolate RDP services and disable RDP on non-essential systems; within 30 days: monitor Microsoft security advisories for patch availability and evaluate alternative remote access solutions (VPN-gated RDP or alternative protocols).

Windows RDP EUVD-2026-35683

| CVE-2026-45639 HIGH

Out-of-bounds Read (CWE-125)

2026-06-09 secure@microsoft.com

GHSA-hpch-68rw-xfqq

Information Disclosure Microsoft Buffer Overflow Remote Desktop Client Windows App Windows 10 1607 Windows 10 1809 Windows 10 21h2 Windows 10 22h2 Windows 11 23h2 Windows 11 24h2 Windows 11 25h2 Windows 11 26h1 Windows Server 2012 Windows Server 2016 Windows Server 2019 Windows Server 2022 Windows Server 2025

7.5

CVSS 3.1 · Vendor: microsoft

Temporal: 6.5

Severity by source

Vendor (microsoft) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CIRCL (temporal)

6.5 MEDIUM

cvss

Primary rating from Vendor (microsoft).

CVSS VectorVendor: microsoft

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Jun 09, 2026 - 19:03 EUVD

Analysis Generated

Jun 09, 2026 - 18:06 vuln.today

CVE Published

Jun 09, 2026 - 17:17 nvd

HIGH 7.5

DescriptionCVE.org

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

AnalysisAI

Information disclosure in Microsoft Windows Remote Desktop Protocol (RDP) allows remote unauthenticated attackers to read out-of-bounds memory over the network, potentially exposing sensitive data from the RDP service process. The flaw is reachable without authentication or user interaction across any exposed RDP endpoint, and no public exploit identified at time of analysis. Microsoft has assigned the issue a CVSS 3.1 score of 7.5 reflecting high confidentiality impact with no integrity or availability effect.

Technical ContextAI

Remote Desktop Protocol (RDP) is Microsoft's proprietary protocol (typically over TCP/3389, with optional UDP transport) used by Windows for remote graphical sessions and implemented in the Terminal Services stack (termdd.sys / rdpcorets.dll and related components). The root cause is CWE-125 (Out-of-bounds Read), meaning the RDP parser reads memory past the bounds of an allocated buffer - typically due to insufficient validation of attacker-controlled length, offset, or PDU field values during message parsing. Such bugs in protocol parsers commonly leak adjacent process memory (uninitialized heap contents, pointers useful for ASLR bypass, or session data) back to the attacker in protocol responses or error paths. The Microsoft-assigned 'Buffer Overflow' and 'Information Disclosure' tags align with a parser-level read primitive rather than a write/code-execution issue.

RemediationAI

Apply the Microsoft security updates referenced in the MSRC advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45639 - patch available per vendor advisory; the exact patched Windows build/KB numbers are listed in that advisory and should be cross-referenced against each affected SKU before deployment. Until patches are rolled out across the fleet, restrict TCP/UDP 3389 at the network edge and from untrusted internal segments, require RDP access only through a Remote Desktop Gateway with MFA, and enforce Network Level Authentication (NLA) on all RDP listeners to require a pre-auth handshake (trade-off: legacy clients without CredSSP support will lose access). For internet-exposed jump hosts that cannot be patched immediately, consider temporarily disabling the Remote Desktop service or blocking 3389 inbound at the firewall (trade-off: remote administration interrupted until alternate access is established).