Information disclosure via out-of-bounds read

Out-of-bounds read in Microsoft Remote Desktop Client on supported Windows releases allows remote attackers to disclose information over a network. Microsoft has not disclosed the affected function or field parser, only that the client reads beyond a buffer boundary while handling untrusted RDP data. The CNA vector requires user interaction, so reachability depends on a user opening or starting a connection to attacker-controlled RDP content, and the published impact is limited to unauthorized disclosure rather than code execution or service interruption.