CVE-2026-50504 exposes information from vulnerable Windows Remote Desktop clients when a user connects to a malicious or compromised RDP server. Microsoft fixed the buffer over-read in its July 14, 2026 security updates, covering supported Windows 11 releases, multiple Windows 10 editions, and...