A method for cognitive screen sharing protection is provided. The method may include, in determining a screen sharing session of a client computing device associated with a user has been initiated, receiving, by a processor, a plurality of pertinent state data associated with the client computing device. The method may also include assigning an initial binary status to at least one display window of at least one open application on the client computing device. The method may further include, in determining a change has occurred to the screen sharing session, updating each assigned binary status. The method may also include detecting an undesirable sharing situation on the client computing device based on the updated binary status of the at least one display window. The method may further include performing a precautionary action based on the detected undesirable sharing situation.