22010 matches found
CVE-2026-69485
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...
CVE-2026-69475
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-69358
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...
CVE-2026-69338
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-69317
Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network...
CVE-2026-69292
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69287
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-68828
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
EUVD-2026-73847
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...
CVE-2026-80096
CVE-2026-80096 is an out-of-bounds read vulnerability in Windows Remote Desktop Services that allows an authorized attacker to elevate privileges over a network. Microsoft rated it CVSS 3.1: 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a network-exploitable flaw req...
EUVD-2026-73681
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-69287
Windows Remote Desktop Services contains a use-after-free flaw that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires local access , high attack complexity , and low prio...
EUVD-2026-73557
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally...
CVE-2026-69616
Windows Remote Desktop Services is affected by an out-of-bounds read vulnerability that allows an authorized local attacker to disclose information (CVSS 3.1: 5.5 MEDIUM — local vector, low privileges required, high confidentiality impact, no integrity or availability impact). CISA's SSVC assessm...
CVE-2026-69536
CVE-2026-69536 is a use-after-free vulnerability in Windows Remote Desktop Services that allows an authorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that while exploitation requ...
EUVD-2026-73533
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
EUVD-2026-73531
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
CVE-2026-69599
Windows Remote Desktop Services contains a use-after-free vulnerability that allows an authorized attacker (low privileges required) to execute code over a network. The CVSS 3.1 score is 7.5 (HIGH) , with high attack complexity and no user interaction required, impacting confidentiality, integrit...
CVE-2026-69475
CVE-2026-69475 is an elevation of privilege vulnerability in Windows Remote Desktop Services , caused by an untrusted pointer dereference . An authorized local attacker with low privileges can exploit this with low complexity and no user interaction to gain high impact across confidentiality, int...