{"id":"CVE-2026-108417","kind":"vulnerability","aliases":["CVE-2026-108417"],"related":[],"title":"Windows Remote Desktop Client: out-of-bounds read leaks data over the network","description":"Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.","summary":"A memory read past the end of a buffer in the Remote Desktop Client lets an unauthorized attacker over the network see information from memory. The sources do not describe the exact data exposed or the trigger.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Remote Desktop Client","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["other","remote-desktop","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:18:12+00:00","first_seen_at":"2026-11-10T19:24:23+00:00","triaged_at":"2026-11-10T19:58:12+00:00","updated_at":"2026-11-10T19:58:12+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-11-10T19:58:12Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Windows Remote Desktop Client: out-of-bounds read leaks data over the network","impact":"low","summary":"A memory read past the end of a buffer in the Remote Desktop Client lets an unauthorized attacker over the network see information from memory. The sources do not describe the exact data exposed or the trigger.","audience":"businesses","category":"other","nicknames":[],"who_cares":["remote-desktop","windows"],"confidence":0.4,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker reads leaked memory contents over the network","analyst_note":"Confirm affected Remote Desktop Client versions, the trigger and the vendor patch at https://nvd.nist.gov/vuln/detail/CVE-2026-108417.","how_to_check":"unknown","plain_action":"","product_name":"Remote Desktop Client","needs_analyst":true,"not_affected_if":[],"who_is_affected":"The sources only say an unauthorized attacker on the network can disclose information through the Remote Desktop Client. Which versions are affected and what setup exposes them is not stated. unknown","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000675,"input_tokens":4493,"output_tokens":451,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-108417':17A,20A '-2026':16A,19A 'allow':75C 'attack':46B,78C 'bound':8A,69C 'buffer':37B 'client':4A,23A,42B,74C 'cve':15A,18A 'data':11A,61B 'describ':58B 'desktop':3A,22A,27B,41B,73C 'disclos':80C 'end':34B 'exact':60B 'expos':62B 'inform':51B,81C 'leak':10A 'let':43B 'memori':30B,53B 'network':14A,49B,84C 'out-of-bound':5A,66C 'past':32B 'read':9A,31B,70C 'remot':2A,26B,40B,72C 'remote':21A 'remote-desktop':25B 'see':50B 'sourc':55B 'trigger':65B 'unauthor':45B,77C 'window':1A,28B","nicknames":[],"mitigations":[],"who_affected":"The sources only say an unauthorized attacker on the network can disclose information through the Remote Desktop Client. Which versions are affected and what setup exposes them is not stated. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["desktopclient","remotedesktopclient"],"ptokens":["client","desktop","remote"],"labels":["medium","other","remotedesktop","vendor","windows"],"campaign_type":null,"search_a":"'-108417':17A,20A '-2026':16A,19A 'bound':8A 'client':4A,23A 'cve':15A,18A 'data':11A 'desktop':3A,22A 'leak':10A 'network':14A 'out-of-bound':5A 'read':9A 'remot':2A 'remote':21A 'window':1A","search_b":"'attack':46B 'buffer':37B 'client':42B 'data':61B 'describ':58B 'desktop':27B,41B 'end':34B 'exact':60B 'expos':62B 'inform':51B 'let':43B 'memori':30B,53B 'network':49B 'past':32B 'read':31B 'remot':26B,40B 'remote-desktop':25B 'see':50B 'sourc':55B 'trigger':65B 'unauthor':45B 'window':28B","search_c":"'allow':75C 'attack':78C 'bound':69C 'client':74C 'desktop':73C 'disclos':80C 'inform':81C 'network':84C 'out-of-bound':66C 'read':70C 'remot':72C 'unauthor':77C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:12+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-108417","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108417","severity":null,"published_at":"2026-11-10T19:18:12+00:00","modified_at":"2026-11-10T19:18:12+00:00","first_seen_at":"2026-11-10T19:24:23+00:00","fetched_at":"2026-11-10T19:24:23+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}