{"id":"CVE-2026-121677","kind":"vulnerability","aliases":["CVE-2026-121677"],"related":[],"title":"Windows Remote Desktop Client: out-of-bounds read can leak memory over network","description":"Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.","summary":"A bounds-checking flaw in the Remote Desktop Client lets an unauthorized attacker read memory outside the intended buffer over the network. The sources say the attacker can disclose information, but not that they can run code.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Remote Desktop Client","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["infrastructure","remote-desktop","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:31+00:00","first_seen_at":"2026-11-10T19:25:09+00:00","triaged_at":"2026-11-10T19:56:19+00:00","updated_at":"2026-11-10T19:56:19+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:56:19Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Windows Remote Desktop Client: out-of-bounds read can leak memory over network","impact":"low","summary":"A bounds-checking flaw in the Remote Desktop Client lets an unauthorized attacker read memory outside the intended buffer over the network. The sources say the attacker can disclose information, but not that they can run code.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["windows","remote-desktop"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"attacker reads sensitive memory contents from the client over the network","analyst_note":"Confirm affected Windows and Remote Desktop Client versions and the Microsoft advisory fix status at https://nvd.nist.gov/vuln/detail/CVE-2026-121677.","how_to_check":"- unknown","plain_action":"","product_name":"Remote Desktop Client","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000658,"input_tokens":4493,"output_tokens":417,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-121677':17A,20A '-2026':16A,19A 'allow':76C 'attack':42B,56B,79C 'bound':8A,31B,70C 'bounds-check':30B 'buffer':48B 'check':32B 'client':4A,23A,38B,75C 'code':66B 'cve':15A,18A 'desktop':3A,22A,27B,37B,74C 'disclos':58B,81C 'flaw':33B 'inform':59B,82C 'infrastructur':24B 'intend':47B 'leak':11A 'let':39B 'memori':12A,44B 'network':14A,51B,85C 'out-of-bound':5A,67C 'outsid':45B 'read':9A,43B,71C 'remot':2A,26B,36B,73C 'remote':21A 'remote-desktop':25B 'run':65B 'say':54B 'sourc':53B 'unauthor':41B,78C 'window':1A,28B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":["desktopclient","remotedesktopclient"],"ptokens":["client","desktop","remote"],"labels":["infrastructure","medium","remotedesktop","vendor","windows"],"campaign_type":null,"search_a":"'-121677':17A,20A '-2026':16A,19A 'bound':8A 'client':4A,23A 'cve':15A,18A 'desktop':3A,22A 'leak':11A 'memori':12A 'network':14A 'out-of-bound':5A 'read':9A 'remot':2A 'remote':21A 'window':1A","search_b":"'attack':42B,56B 'bound':31B 'bounds-check':30B 'buffer':48B 'check':32B 'client':38B 'code':66B 'desktop':27B,37B 'disclos':58B 'flaw':33B 'inform':59B 'infrastructur':24B 'intend':47B 'let':39B 'memori':44B 'network':51B 'outsid':45B 'read':43B 'remot':26B,36B 'remote-desktop':25B 'run':65B 'say':54B 'sourc':53B 'unauthor':41B 'window':28B","search_c":"'allow':76C 'attack':79C 'bound':70C 'client':75C 'desktop':74C 'disclos':81C 'inform':82C 'network':85C 'out-of-bound':67C 'read':71C 'remot':73C 'unauthor':78C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:31+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121677","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121677","severity":null,"published_at":"2026-11-10T19:20:31+00:00","modified_at":"2026-11-10T19:20:31+00:00","first_seen_at":"2026-11-10T19:25:09+00:00","fetched_at":"2026-11-10T19:25:09+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}