CVE-2025-26677 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

...

CVE-2025-30394

Technical details for CVE-2025-30394 are not publicly provided in the supplied documents. The description notes a memory locking issue causing a network denial of service, but no vendor/version/impact/fix specifics are available here. Monitor for updates.

CVE-2025-30394 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

...

CVE-2025-29966

Technical details about CVE-2025-29966 (affected software/components, root cause, impact, or fixes) are not provided in the connected documents. Monitor for updates and sources in the feed for any concrete information.

Windows Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

PT-2025-20969

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop affected versions not specified Description: The issue is a heap-based buffer overflow in Windows Remote Desktop, allowing an unauthorized attacker to execute code over a network. This enables remote attackers to execut...

Microsoft Windows Remote Desktop Gateway 资源管理错误漏洞

Microsoft Windows Remote Desktop Gateway RD Gateway is a role service from Microsoft Corporation USA that allows authorized users to securely access internal network resources over the Internet. A resource management error vulnerability exists in Microsoft Windows Remote Desktop Gateway. An...

CVE-2025-26671

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

Microsoft Patch Tuesday for April 2025 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for April of 2025 which includes 126 vulnerabilities affecting a range of products, including 11 that Microsoft marked as "critical". In this month's release, none of the included vulnerabilities have been observed by Microsoft to be exploited in...

CVE-2025-26671

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2025-27482 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2025-27480 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2025-26671 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2025-26671

CVE-2025-26671 is a Windows Remote Desktop Services remote code execution vulnerability. The connected documents indicate a use-after-free in the RDS component that allows a network-exposed attacker to execute arbitrary code on the affected host without user interaction. Exploitation is described...

CVE-2025-26671 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

Windows Remote Desktop Services Remote Code Execution Vulnerability

Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

Windows Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

Windows Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

PT-2025-15539 · Microsoft · Remote Desktop Gateway Service +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Services affected versions not specified Description: The issue allows remote attackers to execute arbitrary code and affect the system. This is due to a use-after-free condition in the Windows Remote Desktop Gateway...

PT-2025-15513 · Microsoft · Windows Remote Desktop Services +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Services affected versions not specified Description: The issue is related to a use after free condition in Windows Remote Desktop Services, allowing an unauthorized attacker to execute code over a network. This enables...