BlueGate

BlueGate PoC for the Remote Desktop Gateway vulnerability - CVE-2020-0609 & CVE-2020-0610. Thanks to ollypwn for pointing out my silly mistake! Setup I'm using a patched version of pydtls as the original repository wouldn't build properly. cd pydtls sudo python setup.py install Denial of Service ...

rdg_scanner_cve-2020-0609

Scanning for Remote Desktop Gateways Potentially unpatched CVE-2020-0609 and CVE-2020-0610 The scanner has 2 modes of operation: Check for systems vulnerable to CVE-2020-0609 on UDP 3391 Uses the vuln scan code of https://github.com/MalwareTech/RDGScanner Disclaimer Scanning for memory corruption...

CVE-2026-84012

Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

CVE-2026-70033

Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network...

CVE-2026-100218

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

CVE-2026-100218

A use after free vulnerability in the Remote Desktop Gateway Service allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-416 and has a base severity of 8.1 (High) . While the documents confirm the existence of the vulnerability...

CVE-2026-70187

A Use after free vulnerability exists in the Remote Desktop Gateway Service on Windows systems. This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is associated with CWE-416 . While the impact is classified as HIGH with a CVSS 3.1 sc...

CVE-2026-84012

A double free vulnerability exists in the Remote Desktop Gateway Service . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-415 . While the specific software versions and detailed root causes are not explicitly lis...

CVE-2026-84007

The Remote Desktop Gateway Service is vulnerable to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a MEDIUM base severity and requires low privileges to exploit. No specific exploit details or mitigation steps...

CVE-2026-70033

The Windows Remote Desktop Gateway (RD Gateway) is susceptible to a Denial of Service (DoS) vulnerability caused by a missing release of memory after effective lifetime (CWE-401) within the Remote Desktop Gateway Service . An unauthorized attacker can exploit this issue over a network to disrupt ...

Remote Desktop Gateway Service Remote Code Execution Vulnerability

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network...

Windows Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

Remote Desktop Gateway Service Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network...

Windows Remote Desktop Services Remote Code Execution Vulnerability

Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

CVE-2026-100218: Use After Free

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

PT-2026-112697

Name of the Vulnerable Software and Affected Versions Remote Desktop Gateway Service affected versions not specified Description An out-of-bounds read in the Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network. An out-of-bounds read occurs when the...

Microsoft Windows: CVE-2026-84007: Remote Desktop Gateway Service Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-84012: Windows Remote Desktop Services Remote Code Execution Vulnerability

Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70187: Windows Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...