CVE-2026-100218

A use after free vulnerability in the Remote Desktop Gateway Service allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-416 and has a base severity of 8.1 (High) . While the documents confirm the existence of the vulnerability...

CVE-2026-70187

A Use after free vulnerability exists in the Remote Desktop Gateway Service on Windows systems. This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is associated with CWE-416 . While the impact is classified as HIGH with a CVSS 3.1 sc...

CVE-2026-84007

The Remote Desktop Gateway Service is vulnerable to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a MEDIUM base severity and requires low privileges to exploit. No specific exploit details or mitigation steps...

CVE-2026-84012

A double free vulnerability exists in the Remote Desktop Gateway Service . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-415 . While the specific software versions and detailed root causes are not explicitly lis...

CVE-2026-70033

The Windows Remote Desktop Gateway (RD Gateway) is susceptible to a Denial of Service (DoS) vulnerability caused by a missing release of memory after effective lifetime (CWE-401) within the Remote Desktop Gateway Service . An unauthorized attacker can exploit this issue over a network to disrupt ...

Windows Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network...

BlueGate

BlueGate PoC for the Remote Desktop Gateway vulnerability - CVE-2020-0609 & CVE-2020-0610. Thanks to ollypwn for pointing out my silly mistake! Setup I'm using a patched version of pydtls as the original repository wouldn't build properly. cd pydtls sudo python setup.py install Denial of Service ...

rdg_scanner_cve-2020-0609

Scanning for Remote Desktop Gateways Potentially unpatched CVE-2020-0609 and CVE-2020-0610 The scanner has 2 modes of operation: Check for systems vulnerable to CVE-2020-0609 on UDP 3391 Uses the vuln scan code of https://github.com/MalwareTech/RDGScanner Disclaimer Scanning for memory corruption...

[SECURITY] Fedora 45 Update: guacamole-server-1.6.0-9.fc45

Guacamole is an HTML5 remote desktop gateway. Guacamole provides access to desktop environments using remote desktop protoc ols like VNC and RDP. A centralized server acts as a tunnel and proxy, allowing access to multiple desktops through a web browser. No browser plugins are needed, and no clie...

CVE-2026-69338

Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-69292

Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73225

Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-69338

CVE-2026-69338 is a use-after-free vulnerability in the Remote Desktop Gateway Service that allows an authorized (low-privilege) attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with high complexity, required user interaction, and high impact on confidentiality, i...

EUVD-2026-73214

Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69292

A double free vulnerability in the Remote Desktop Gateway Service (Microsoft) allows an authorized local attacker to elevate privileges . The flaw requires local access with low privileges and high attack complexity , but grants full compromise of confidentiality, integrity, and availability upon...

Remote Desktop Gateway Service Elevation of Privilege Vulnerability

Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network...

Remote Desktop Gateway Service Elevation of Privilege Vulnerability

Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally...

PT-2026-87339

Name of the Vulnerable Software and Affected Versions Remote Desktop Gateway Service affected versions not specified Description A double free issue in the Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally. A double free occurs when the program attempts to...

PT-2026-87379

Name of the Vulnerable Software and Affected Versions Remote Desktop Gateway Service affected versions not specified Description A use-after-free condition in the Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory corrupti...