Windows App For Mac
Monthly
Out-of-bounds read in Microsoft Windows App for Mac (versions 11.0.0 through 11.3.8) enables a remote unauthenticated attacker to disclose sensitive memory contents over the network when a victim connects to a malicious Remote Desktop server. The CVSS vector (AV:N/AC:L/PR:N/UI:R) confirms network reachability without attacker authentication, though successful exploitation requires the victim to initiate or be lured into an RDP session. No public exploit code and no CISA KEV listing have been identified at time of analysis; a vendor patch to version 11.3.9 is available from Microsoft.
Out-of-bounds read in Microsoft Windows App for Mac (versions 11.0.0 through 11.3.8) enables a remote unauthenticated attacker to disclose sensitive memory contents over the network when a victim connects to a malicious Remote Desktop server. The CVSS vector (AV:N/AC:L/PR:N/UI:R) confirms network reachability without attacker authentication, though successful exploitation requires the victim to initiate or be lured into an RDP session. No public exploit code and no CISA KEV listing have been identified at time of analysis; a vendor patch to version 11.3.9 is available from Microsoft.