cve-2026-57982

CVE-2026-57982 is a Windows Remote Desktop Protocol information-disclosure vulnerability addressed in Microsoft’s July 2026 security updates. The flaw could allow an authenticated, low-privileged attacker to retrieve data over the network. Microsoft rates it Medium severity with a CVSS 3.1 score of 6.5, although RDP is commonly exposed to administrators, help desks, vendors, and remote workers. The vulnerability involves use of an uninitialized resource in Windows RDP and is tracked as CWE-908. This tag page collects the available WindowsForum.com coverage of the Microsoft advisory and related details about the vulnerability’s impact and remediation.