CVE-2022-26940: Remote Desktop Protocol Client Information Disclosure Vulnerability
Published May 10, 2022
·Updated
Remote Desktop Protocol Client Information Disclosure Vulnerability.
Affected Software
10 affected componentsFixes available
Microsoft Remote Desktop client for Windows Desktop
Microsoft Windows 11=21H2
Microsoft Windows 11=21H2
Microsoft Remote Desktop Windows
Microsoft Windows 11
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Remote Desktop Client Windows
Remediation
Event History
May 10, 2022
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·08:34 PM
Data Sourced
via MITRE·08:34 PM
DescriptionSeverity
Data Sourced
via NVD·09:15 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2022-26940?
CVE-2022-26940 is a Remote Desktop Protocol (RDP) client information disclosure vulnerability.
2
What is the severity of CVE-2022-26940?
CVE-2022-26940 has a severity rating of 6.5, which is considered medium.
3
Which software is affected by CVE-2022-26940?
The Microsoft Remote Desktop client for Windows Desktop, Microsoft Windows 11, and Microsoft Windows Server 2022 are affected by CVE-2022-26940.
4
How can I fix CVE-2022-26940?
To fix CVE-2022-26940, it is recommended to apply the security updates provided by Microsoft.
5
Where can I find more information about CVE-2022-26940?
You can find more information about CVE-2022-26940 on the Microsoft Security Guidance Advisory page: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26940