CVE-2026-69550 is an out-of-bounds read vulnerability (CWE-126) in the Remote Desktop Client component of Microsoft Windows App for Mac. This vulnerability allows an attacker without privileges to cause information disclosure remotely over a network. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, high confidentiality impact, no integrity or availability impact. The affected versions are 11.0.0 and all versions up to but not including 11.3.9.

An attacker can remotely exploit this vulnerability to read memory out-of-bounds, potentially disclosing sensitive information. The impact is limited to confidentiality with no impact on integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the Microsoft vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69550 for current remediation guidance. No explicit patch or workaround is stated in the provided data.