CVE-2026-69550: Microsoft Windows App

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Affected products

• Microsoft Windows App: before 11.3.9 (fixed in 11.3.9)

Published 2026-08-19. Last modified 2026-08-27.