CVE-2026-69550: Windows App for Mac Information Disclosure Vulnerability

Overview

Severity

Medium (CVSS 6.5)

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Category

Information Disclosure

Exploit Status

Not Exploited

Exploitation Likelihood

Less Likely

Patch Tuesday

2026-Aug

Released

2026-08-11

Description

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

FAQ

What type of information could be disclosed by this vulnerability? Exploiting this vulnerability could allow the disclosure of initialized or uninitialized memory in the process heap.

Affected Products (1)

Windows

• Windows App for Mac

Acknowledgments

<a href="https://linkedin.com/in/zoltanharmath">Zoltan Harmath</a> with Microsoft

Revision History

• 2026-08-11: Information published.