CVE-2026-61356: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

The vulnerability of the implementation of the CRdpPipeGfxPlugin component in the system DLL file rdpcorets.dll of the Remote Desktop Services (RDS) service for Windows operating systems allows a malicious individual to escalate their privileges or cause service failures.

The vulnerability of the CRdpPipeGfxPlugin component in the system DLL file rdpcorets.dll of the Remote Desktop Services RDS service on Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their...

EUVD-2026-43941

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...

CVE-2026-50369

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...

CVE-2026-58626

CVE-2026-58626 is a Windows Remote Desktop Services use-after-free vulnerability that can allow an authenticated attacker to execute arbitrary code over the network. The CVE is rated CVSS v3.1 base score 8.8 (High) with Network attack, Low attack complexity, Privileges Required: Low, User Interac...

CVE-2026-58626 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2026-50369 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2026-50369 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...

Windows Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

PT-2026-58665

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

PT-2026-58351

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use after free condition in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. Use after free is a memory corruption...

CVE-2026-58626: Use After Free

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

CVE-2026-50369: Use After Free

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...

net: rds: clear i_sends on setup unwind

...

The vulnerability of the Remote Desktop Services (RDS) service on Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Remote Desktop Services RDS service on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2026-40398 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2026-40398

CVE-2026-40398 is a heap-based buffer overflow in Windows Remote Desktop Services that allows an authenticated attacker to perform local privilege escalation. The description across sources consistently identifies a local, authenticated exploit path with a high impact (C/H/I/A: High) and a CVSS v...

CVE-2026-40398 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

Microsoft Windows Remote Desktop Services 安全漏洞

Microsoft Windows Remote Desktop Services is a set of features provided by Microsoft that allow users to access graphical desktops and Windows applications remotely. There are security vulnerabilities in Microsoft Windows Remote Desktop Services. Attackers can exploit these vulnerabilities to gai...