CVE-2026-26159

CVE-2026-26159 concerns the Windows Remote Desktop Licensing Service. The issue allows local attackers with low privileges and no user interaction to exploit elevation of privilege, impacting confidentiality, integrity, and availability. The CVSS v3.1 base score is 7.8 (HIGH) with LOCAL attack ve...

CVE-2026-26159 Remote Desktop Licensing Service Elevation of Privilege Vulnerability

...

CVE-2026-32157 Remote Desktop Client Remote Code Execution Vulnerability

...

CVE-2026-32157

CVE-2026-32157 affects the Remote Desktop Client and enables remote code execution over the network. The CVSSv3.1 score is 8.8 (HIGH), with confidentiality, integrity, and availability all rated High. Attack requires network access and user interaction, with privilegesN/A and exploitation current...

CVE-2026-32157

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-32157 Remote Desktop Client Remote Code Execution Vulnerability

...

CVE-2026-26160 Remote Desktop Licensing Service Elevation of Privilege Vulnerability

...

CVE-2026-26160 Remote Desktop Licensing Service Elevation of Privilege Vulnerability

...

CVE-2026-26160

CVE-2026-26160 affects the Windows Remote Desktop Licensing Service. The issue arises from missing authentication for a critical function, enabling an authorized local attacker to elevate privileges on affected systems. The CVE has a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, lo...

CVE-2026-26151 Remote Desktop Spoofing Vulnerability

...

CVE-2026-26151 Remote Desktop Spoofing Vulnerability

...

CVE-2026-26151

CVE-2026-26151 describes insufficient UI warnings in Windows Remote Desktop that can enable a network attacker to spoof a remote session. The NVD entry lists a CVSS v3.1 base score of 7.1 (HIGH) with network access, no privileges required, user interaction required, and impact to confidentiality ...

April 14, 2026—KB5082123 (OS Build 17763.8644)

None None...

April 14, 2026—KB5082198 (OS Build 14393.9060)

None None...

Remote Desktop Licensing Service Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally...

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Remote Desktop Licensing Service Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally...

Remote Desktop Spoofing Vulnerability

Insufficient ui warning of dangerous operations in Windows Remote Desktop allows an unauthorized attacker to perform spoofing over a network...

PT-2026-32731

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions 10.0.14393.0 through 10.0.14393.9059 Description Insufficient UI warning of dangerous operations in Windows Remote Desktop allows an unauthorized attacker to perform spoofing over a network by misleading users int...

KB5083768: Windows 11 Version 26H1 Security Update (April 2026)

The remote Windows host is missing security update 5083768. It is, therefore, affected by multiple vulnerabilities - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. CVE-2026-33824 - Protection mechanism failure in Windows Shell allows an...