CVE-2026-56190
Remote Desktop Protocol Remote Code Execution Vulnerability
CRITICAL 9.8EPSS 1.0%
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network.
- Affected
- Microsoft · Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2 · Windows 10 Version 22H2 · Windows 11 Version 24H2 · Windows 11 Version 25H2
- CVSS v3.1 MICROSOFT
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1 microsoft
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C - EPSS
- 0.97% chance of exploitation in the next 30 days, 62nd percentile
- Published
- 2026-07-14
- Updated
- 2026-11-01
Proof-of-concept exploits (2)
- danarhirany300-ctrl/CVE-2026-56190-RCERepo stars 0★ · pushed 2026-11-02 · snapshot
2 files
- danarhirany300-ctrl/CVE-2026-56190-Windows-Server-2022-RDPRepo metadata unavailable ·
1 file