Microsoft Fixes Multiple Windows RDP Flaws Exposing Sensitive Data Over the Network

Microsoft released fixes for five Windows RDP information-disclosure vulnerabilities (CVE-2026-50445, CVE-2026-50497, CVE-2026-55003, CVE-2026-57979, CVE-2026-57982) — mainly buffer over-read, out-of-bounds read, off-by-one and uninitialized resource issues — that could expose sensitive memory over the network. Most are rated Important with CVSS v3.1 base score ~6.5, are remotely reachable with low complexity but generally require user interaction (one requires low-privileged local access), and organizations are advised to apply updates, limit RDP exposure, require VPN/zero-trust controls, enable NLA/MFA, and monitor RDP logs.