PT-2026-58607 · Microsoft · Windows 11+3

Published 2026-07-14 · Updated 2026-07-15 · CVE-2026-56190

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows 10 Windows 11 Windows Server (affected versions not specified)

Description An uninitialized resource flaw in the Remote Desktop Protocol (RDP) allows an unauthorized attacker to execute arbitrary code over a network. This issue can be exploited without requiring user interaction or valid credentials.

Recommendations Apply the latest security updates for Windows 10. Apply the latest security updates for Windows 11. Apply the latest security updates for Windows Server.

Fix

RCE

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

CVE-2026-56190

Affected Products

Windows

Windows 10

Windows 11

Windows Server

References · 7

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56190 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-56190 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-56190 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56190 · Security Note
• https://twitter.com/SecAlertsCo/status/2077312834359230832 · Twitter Post
• https://vulnipulse.com/vendors/microsoft · Reddit Post
• https://twitter.com/windowsforum/status/2077471796815704422 · Twitter Post