33675 matches found
CVE-2026-71342
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-71333
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-70570
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
CVE-2026-69813
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...
CVE-2026-69590
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
EUVD-2026-73984
In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-73728
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
EUVD-2026-73678
Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally...
CVE-2026-72966
CVE-2026-72966 affects Windows Remote Access Connection Manager , where a missing authorization check allows an already-authorized (low-privilege) local attacker to perform tampering without user interaction. The impact is rated HIGH for integrity with no effect on confidentiality or availability...
CVE-2026-72950
CVE-2026-72950 is a Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS) that allows an attacker with low privileges over the network to gain unauthorized access to a victim's machine. The assigned CVSS 3.1 score is 8.8 (HIGH) , reflecting low attack complexity,...
CVE-2026-71352
CVE-2026-71352 is an integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires low privileges and no user interaction, with a CVSS 3.1 base score of 8.8 (HIGH) r...
EUVD-2026-73659
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-71342
A use-after-free flaw in Windows Remote Access Connection Manager enables a locally authenticated attacker to elevate privileges, as disclosed by Microsoft. The vulnerability is rated CVSS 3.1: 7.0 (HIGH) with a vector of local attack, high complexity, low privileges required, and no user interac...
CVE-2026-69852
CVE-2026-69852 is a Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS) , allowing a network-based attacker with low privileges to gain unauthorized access to a victim's machine. The CVSS v3.1 score is 7.5 (HIGH) with the vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/...
EUVD-2026-73459
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-69331
CVE-2026-69331 is a use-after-free vulnerability in Windows Remote Access Connection Manager that allows an authorized local attacker to elevate privileges . The vulnerability is rated HIGH (CVSS 3.1: 7.0) with a local attack vector , high complexity , and low privileges required . No user intera...
EUVD-2026-73103
Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...
CVE-2026-71343
CVE-2026-71343 affects Windows Remote Access Connection Manager and is caused by a heap-based buffer overflow that allows a local, authorized attacker with low privileges to execute code. The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating full compro...