MicrosoftCVE-2026-69550

Microsoft Windows App for Mac: out-of-bounds read

Medium6.5CVE-2026-69550 · Published Aug 19, 2026 · updated Aug 27, 2026

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Microsoft advisory

Affected versions

Package	Affected	Fixed in
Windows App for Mac Product	>= 11.0.0, < 11.3.9	11.3.9

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-126, CWE-125

More Microsoft advisories

Date	Advisory	Severity	Fixed in
Aug 20	Microsoft Fabric: path traversal Critical9.9Aug 20 CVE-2026-63509No fix yet	Critical9.9	No fix yet
Aug 20	Microsoft Azure Data Factory: privilege escalation Critical9.3Aug 20 CVE-2026-62834No fix yet	Critical9.3	No fix yet
Aug 20	Microsoft Windows Remote Help: uncontrolled search path Medium5.5Aug 20 CVE-2026-550155.2.1040.0	Medium5.5	5.2.1040.0
Aug 20	Microsoft Windows Remote Help: spoofing High7.1Aug 20 CVE-2026-550135.2.1040.0	High7.1	5.2.1040.0
Aug 19	Microsoft Windows Telephony Service: race condition High7.0Aug 19 CVE-2026-6272710.0.14393.9418+9 more	High7.0	10.0.14393.9418+9 more
Aug 18	Microsoft Copilot Web: command injection High8.8Aug 18 CVE-2026-24301No fix yet	High8.8	No fix yet

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.