CVE-2026-87698

Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally...

CVE-2026-85867

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-70137

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally...

CVE-2026-87698

A Windows Remote Access Service Infrastructure component is vulnerable to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure on the affected system. The CVSS 3.1 score is 5.5, reflecting a medium severity with a local attack vector a...

CVE-2026-70137

A vulnerability in Windows Remote Access Connection Manager involves improper access control , which allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high impact on confidentiality. No specific exploit details or versions are pr...

CVE-2026-85867

A heap-based buffer overflow exists in the Windows Remote Access Connection Manager . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or remediation versions are provided in the documentation.

Windows Remote Access Service Infrastructure Information Disclosure Vulnerability

Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally...

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85867: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87698: Windows Remote Access Service Infrastructure Information Disclosure Vulnerability

Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally...

PT-2026-112246

Name of the Vulnerable Software and Affected Versions Windows Remote Access Connection Manager affected versions not specified Description Improper access control allows an authorized attacker to locally disclose sensitive information, which can affect the system. Recommendations At the moment,...

CVE-2026-72966

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally...

CVE-2026-71342

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-72966

CVE-2026-72966 affects Windows Remote Access Connection Manager , where a missing authorization check allows an already-authorized (low-privilege) local attacker to perform tampering without user interaction. The impact is rated HIGH for integrity with no effect on confidentiality or availability...

EUVD-2026-73678

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally...

CVE-2026-71352

CVE-2026-71352 is an integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires low privileges and no user interaction, with a CVSS 3.1 base score of 8.8 (HIGH) r...

EUVD-2026-73659

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-71342

A use-after-free flaw in Windows Remote Access Connection Manager enables a locally authenticated attacker to elevate privileges, as disclosed by Microsoft. The vulnerability is rated CVSS 3.1: 7.0 (HIGH) with a vector of local attack, high complexity, low privileges required, and no user interac...

CVE-2026-69331

CVE-2026-69331 is a use-after-free vulnerability in Windows Remote Access Connection Manager that allows an authorized local attacker to elevate privileges . The vulnerability is rated HIGH (CVSS 3.1: 7.0) with a local attack vector , high complexity , and low privileges required . No user intera...