CVE-2026-50369

CVE-2026-50369 reproducer for a TOCTOU race condition in rdpcorets.dll!CRdpPipeGfxPlugin::Enable on Windows Server 2025 RDS Session Hosts. i reported this as a DoS; the code-path seem to somehow also enable EoP. this reproducer is a PoC for the DoS path alone. Bug Enable reads a COM interface...

CRdpPipeGfxPlugin Heap Buffer Overflow Privilege Escalation

The vulnerability of the CRdpPipeGfxPlugin component in the system DLL file rdpcorets.dll of the Remote Desktop Services RDS service on Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their...