Skip to main content
Griffin Technology PartnersGTP
HighCVE-2026-56171active

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Published July 16, 2026Updated July 16, 2026

Source data

Overview

Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network.

Impact & technical details

Information Disclosure

Can I install the update via a PowerShell module? Yes, please see instructions here: How to Update the RD Web Client . The link to the PowerShell Gallery is here .

CVSS base score
7.1 / 10
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C

Highest base score supplied by MSRC for this record; the vector belongs to that score. Ratings can vary by product. Microsoft Important is displayed as High; Moderate is displayed as Medium.

Affected products

  • Remote Desktop Web Client
  • Windows Admin Center

Source guidance

Remediation

  • Release Notes

At least one Microsoft vendor-fix reference is available. Check each affected product for its applicable update, prerequisites, and supported version.

GTP recommendation · Rule-based guidance

Recommended next step

Review affected Microsoft products and apply the applicable security updates through your organization's normal patch-management process. Confirm availability and prerequisites in the Microsoft advisory.

Authoritative sources & updates

Findings and update information come from the linked publishers. GTP compiles the public record and provides the recommendation above. CVSS ratings shown here come from Microsoft. NVD references provide additional public context.

Managed by GTP?

Griffin Technology Partners managed customers may receive additional environment-specific security guidance and remediation assistance through their managed services relationship.

Security bulletins are provided for informational purposes and compiled from authoritative public sources. Vulnerability applicability varies by environment. Validate affected products, configuration, compatibility requirements, and vendor guidance before making production changes.