PT-2026-58607 · Microsoft · Windows 10+3

CVE-2026-56190

·

Published

2026-07-14

·

Updated

2026-07-22

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Windows 10 Windows 11 Windows Server (affected versions not specified)
Description An uninitialized resource flaw in the Windows Remote Desktop Protocol (RDP) allows an unauthorized and unauthenticated attacker to execute arbitrary code over a network without requiring user interaction.
Recommendations Apply the security updates released on July 14, 2026.

Fix

RCE

DoS

Use of Uninitialized Resource

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-908

Related Identifiers

BDU:2026-10545
CVE-2026-56190

Affected Products

Windows
Windows 10
Windows 11
Windows Server