PT-2026-60883 · Microsoft · Windows Rdp+1

CVE-2026-56171 · Published 2026-07-17 · Updated 2026-07-18

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows RDP (affected versions not specified) Microsoft Server Remote Desktop Web Client (affected versions not specified)

Description An issue in Windows RDP and the Server Remote Desktop Web Client allows an unauthorized actor to disclose private personal information over a network.

Recommendations Upgrade to a vendor-listed fixed release for Microsoft Server Remote Desktop Web Client. At the moment, there is no information about a newer version that contains a fix for this vulnerability for Microsoft Windows RDP.

Fix

Weakness Enumeration

CWE-359

Related Identifiers

CVE-2026-56171

Affected Products

Server Remote Desktop Web Client

Windows Rdp

References · 7

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56171 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-56171 · Security Note
• https://twitter.com/VulmonFeeds/status/2078328309620916654 · Twitter Post
• https://twitter.com/vulnipulse/status/2078236101115076633 · Twitter Post
• https://twitter.com/CVEnew/status/2078246783613018544 · Twitter Post
• https://twitter.com/vuldb/status/2078243752569971167 · Twitter Post
• https://twitter.com/dustin_childs/status/2078200422272020790 · Twitter Post