Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network.
History

Fri, 17 Jul 2026 21:45:00 +0000

Type Values Removed Values Added
Description Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network.
Title Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
First Time appeared Microsoft
Microsoft remote Desktop Web Client
Microsoft windows Admin Center
Weaknesses CWE-359
CPEs cpe:2.3:a:microsoft:remote_desktop_web_client:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:windows_admin_center:*:*:*:*:*:*:*:*
Vendors & Products Microsoft
Microsoft remote Desktop Web Client
Microsoft windows Admin Center
References
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C'}


cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2026-07-17T21:34:17.768Z

Reserved: 2026-06-19T13:53:31.989Z

Link: CVE-2026-56171

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.