CVE-2026-69536

CVE-2026-69536 is a use-after-free vulnerability in Windows Remote Desktop Services that allows an authorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that while exploitation requ...

EUVD-2026-73533

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

CVE-2026-69599

Windows Remote Desktop Services contains a use-after-free vulnerability that allows an authorized attacker (low privileges required) to execute code over a network. The CVSS 3.1 score is 7.5 (HIGH) , with high attack complexity and no user interaction required, impacting confidentiality, integrit...

EUVD-2026-73372

Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network...

EUVD-2026-73371

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

EUVD-2026-73368

Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...

CVE-2026-58611

CVE-2026-58611 is an improper authorization vulnerability in Xbox Gaming Services that allows an already-authorized (low-privilege) attacker to elevate privileges locally , resulting in high impact to confidentiality, integrity, and availability. The assigned CVSS 3.1 score is 7.8 (HIGH) with a l...

EUVD-2026-73112

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

CVE-2026-72943

A use after free vulnerability in Windows Deployment Services allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS v3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack complexity but high impact on con...

CVE-2026-69524

CVE-2026-69524 is a use-after-free vulnerability in Windows Active Directory Domain Services that allows an unauthorized, network-based attacker to achieve remote code execution without prior authentication or user interaction. Microsoft rates it CVSS 8.1 (HIGH) with high impact on confidentialit...

EUVD-2026-73007

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

CVE-2026-69525

CVE-2026-69525 is a use-after-free vulnerability in Windows Remote Desktop Services that allows an unauthorized attacker to achieve remote code execution over a network. The Microsoft CNA assigned a CVSS 3.1 score of 9.8 (CRITICAL) with a vector of AV:N/AC:L/PR:N/UI:N, indicating low attack compl...

EUVD-2026-73006

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

EUVD-2026-73002

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

CVE-2026-69359

A heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to perform local privilege escalation . The attack requires local access with low privileges , no user interaction, and has low complexity , with high impact to confidentiality, integrity, and availabil...

Remote Desktop Services Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

Xbox Gaming Services Elevation of Privilege Vulnerability

Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...

Windows Management Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...

Windows Deployment Services Remote Code Execution Vulnerability

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...