737 matches found
CVE-2026-69518
CVE-2026-69518 is a heap-based buffer overflow in Windows Remote Desktop that allows an unauthorized attacker to execute code over a network. The vulnerability is classified with CVSS 3.1 score 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H , indicating network-reachable attack...
EUVD-2026-73136
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network...
CVE-2026-71343
CVE-2026-71343 affects Windows Remote Access Connection Manager and is caused by a heap-based buffer overflow that allows a local, authorized attacker with low privileges to execute code. The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating full compro...
EUVD-2026-73101
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally...
CVE-2026-69627
CVE-2026-69627 is an out-of-bounds read vulnerability in the Windows Remote Desktop Licensing Service . An authorized local attacker with low privileges can exploit this flaw to disclose information , resulting in high confidentiality impact but no integrity or availability impact (CVSS 3.1: 5.5 ...
CVE-2026-69539
CVE-2026-69539 is a use after free vulnerability in Windows Remote Desktop Services that allows an authorized attacker to achieve remote code execution over a network. The CVSS v3.1 base score is 7.5 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that exploitation requi...
CVE-2026-69514
CVE-2026-69514 is a heap-based buffer overflow in Windows Remote Desktop Services (RDS) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The vulnerability requires high attack complexity and no user interaction, yielding a CVSS 3.1 base score of...
CVE-2026-68893
CVE-2026-68893 is a use-after-free vulnerability in the Windows Remote Desktop Licensing Service that allows an authorized attacker to elevate privileges over a network . The flaw is rated CVSS 3.1: 7.1 (High) with a vector requiring network access, high complexity, low privileges, and user inter...
0net
0net: Sencillo backdoor de control remoto para Windows Introducción: 0net es un sencillo programa backdoor de control remoto para Windows. El cliente está escrito en C++ y compilado en VC++ 6.0. El servidor está escrito en Python y es multiplataforma. El proyecto se encuentra actualmente en...
CVE-2026-21533_Scanner.py
CVE-2026-21533 Scanner: Windows RDP Local Privilege Escalation Detection Tool This repository contains a detection tool for the CVE-2026-21533 vulnerability, a privilege management flaw in Windows Remote Desktop Services RDS that could allow a local attacker to elevate their privileges to SYSTEM...
EUVD-2026-63696
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...
EUVD-2026-63697
Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...
CVE-2026-55015
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...
CVE-2026-55013
Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...
CVE-2026-55013 Windows Remote Help Defense Spoofing Vulnerability
...
CVE-2026-55015
CVE-2026-55015 is an uncontrolled search path element vulnerability in Windows Remote Help that allows an authorized local attacker to cause a denial of service . The attack requires local access with low privileges and no user interaction (CVSS 3.1: 5.5 MEDIUM ). CISA's SSVC assessment indicates...
CVE-2026-55013 Windows Remote Help Defense Spoofing Vulnerability
...
CVE-2026-55013
An uncontrolled search path element in Windows Remote Help Defense allows an authorized local attacker (low privileges, no user interaction) to spoof, with HIGH confidentiality and integrity impact per CVSS 3.1 (base score 7.1). Microsoft's update guide is the primary reference. No exploit code o...
