CVE-2026-26151
HighSummary
Insufficient UI warnings of dangerous operations in Windows Remote Desktop allow an unauthorized attacker to perform spoofing over a network.
Risk Assessment
An attacker could exploit this vulnerability to mislead users, potentially leading to unauthorized access to systems or data.
Recommendation
It is recommended to monitor and update Windows Remote Desktop and implement additional security measures to minimize spoofing risks.
Other vulnerabilities in Windows Remote Desktop
See all- CVE-2026-40398High
Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
- CVE-2026-69518High
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
- CVE-2023-35352High
A vulnerability in Windows Remote Desktop allows for a security feature bypass, potentially leading to unauthorized access to the system.
Original NVD description (English source)
Insufficient ui warning of dangerous operations in Windows Remote Desktop allows an unauthorized attacker to perform spoofing over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS