6582 matches found
EUVD-2026-73285
Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network...
CVE-2026-77896
The Windows Remote Desktop Client is affected by an integer overflow or wraparound vulnerability. This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. While the CVSS scores vary between 6.5 and 7.5 depending on the source, they consistently indicat...
CVE-2026-69518
CVE-2026-69518 is a heap-based buffer overflow in Windows Remote Desktop that allows an unauthorized attacker to execute code over a network. The vulnerability is classified with CVSS 3.1 score 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H , indicating network-reachable attack...
EUVD-2026-73136
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network...
CVE-2026-69627
CVE-2026-69627 is an out-of-bounds read vulnerability in the Windows Remote Desktop Licensing Service . An authorized local attacker with low privileges can exploit this flaw to disclose information , resulting in high confidentiality impact but no integrity or availability impact (CVSS 3.1: 5.5 ...
EUVD-2026-73033
Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally...
EUVD-2026-73007
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
CVE-2026-69539
CVE-2026-69539 is a use after free vulnerability in Windows Remote Desktop Services that allows an authorized attacker to achieve remote code execution over a network. The CVSS v3.1 base score is 7.5 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that exploitation requi...
EUVD-2026-73006
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...
CVE-2026-69525
CVE-2026-69525 is a use-after-free vulnerability in Windows Remote Desktop Services that allows an unauthorized attacker to achieve remote code execution over a network. The Microsoft CNA assigned a CVSS 3.1 score of 9.8 (CRITICAL) with a vector of AV:N/AC:L/PR:N/UI:N, indicating low attack compl...
CVE-2026-69514
CVE-2026-69514 is a heap-based buffer overflow in Windows Remote Desktop Services (RDS) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The vulnerability requires high attack complexity and no user interaction, yielding a CVSS 3.1 base score of...
EUVD-2026-73002
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
EUVD-2026-72983
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...
CVE-2026-69485
CVE-2026-69485 is a Remote Code Execution vulnerability in Microsoft Remote Desktop Client caused by use of an uninitialized resource . An authorized attacker with low privileges can exploit it remotely over a network without user interaction, achieving full compromise of confidentiality, integri...
EUVD-2026-73225
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-69338
CVE-2026-69338 is a use-after-free vulnerability in the Remote Desktop Gateway Service that allows an authorized (low-privilege) attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with high complexity, required user interaction, and high impact on confidentiality, i...
CVE-2026-69292
A double free vulnerability in the Remote Desktop Gateway Service (Microsoft) allows an authorized local attacker to elevate privileges . The flaw requires local access with low privileges and high attack complexity , but grants full compromise of confidentiality, integrity, and availability upon...
EUVD-2026-73214
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally...
CVE-2026-68893
CVE-2026-68893 is a use-after-free vulnerability in the Windows Remote Desktop Licensing Service that allows an authorized attacker to elevate privileges over a network . The flaw is rated CVSS 3.1: 7.1 (High) with a vector requiring network access, high complexity, low privileges, and user inter...