CVE-2026-96321: CWE-125: Out-of-bounds Read in Microsoft Windows 10 Version 21H2

This vulnerability (CVE-2026-96321) involves an out-of-bounds read in the Remote Desktop Display Driver on Microsoft Windows 10 Version 21H2. An authorized attacker with local privileges can exploit this flaw to read memory beyond the allocated buffer, potentially disclosing sensitive information. The issue is tracked under CWE-125. Microsoft has published an official fix to address this vulnerability.

The vulnerability allows an authorized local attacker to read memory outside the intended buffer, leading to potential information disclosure. There is no impact on integrity or availability. No known exploits are reported in the wild.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96321 to remediate this vulnerability.