CVE-2026-72966

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally...

CVE-2026-71342

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

EUVD-2026-73678

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally...

CVE-2026-72966

CVE-2026-72966 affects Windows Remote Access Connection Manager , where a missing authorization check allows an already-authorized (low-privilege) local attacker to perform tampering without user interaction. The impact is rated HIGH for integrity with no effect on confidentiality or availability...

CVE-2026-71352

CVE-2026-71352 is an integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires low privileges and no user interaction, with a CVSS 3.1 base score of 8.8 (HIGH) r...

CVE-2026-71342

A use-after-free flaw in Windows Remote Access Connection Manager enables a locally authenticated attacker to elevate privileges, as disclosed by Microsoft. The vulnerability is rated CVSS 3.1: 7.0 (HIGH) with a vector of local attack, high complexity, low privileges required, and no user interac...

EUVD-2026-73659

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-69331

CVE-2026-69331 is a use-after-free vulnerability in Windows Remote Access Connection Manager that allows an authorized local attacker to elevate privileges . The vulnerability is rated HIGH (CVSS 3.1: 7.0) with a local attack vector , high complexity , and low privileges required . No user intera...

CVE-2026-71343

CVE-2026-71343 affects Windows Remote Access Connection Manager and is caused by a heap-based buffer overflow that allows a local, authorized attacker with low privileges to execute code. The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating full compro...

EUVD-2026-73101

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally...

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-65671

Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...

CVE-2026-65672

Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...

EUVD-2026-56436

Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...

CVE-2026-62758 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

PT-2026-70659

Name of the Vulnerable Software and Affected Versions Windows Remote Access API affected versions not specified Description A heap-based buffer overflow in the Windows Remote Access API allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program...

PT-2026-70535

Name of the Vulnerable Software and Affected Versions Windows Remote Access Connection Manager affected versions not specified Description A heap-based buffer overflow occurs in the Windows Remote Access Connection Manager. This issue allows an authorized attacker to elevate privileges locally on...

PT-2026-70658

Name of the Vulnerable Software and Affected Versions Windows Remote Access API affected versions not specified Description A heap-based buffer overflow in the Windows Remote Access API allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program...

CVE-2026-56647

Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network...

CVE-2026-56647

CVE-2026-56647 is a Windows vulnerability in the Windows Remote Access Service Infrastructure where an integer overflow/wraparound can let an authorized attacker elevate privileges over a network. The affected component is the Windows Remote Access Service Infrastructure, and the root cause is an...