CVE-2026-40398
HighSummary
Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with appropriate permissions can gain elevated privileges on the system, potentially leading to serious security breaches.
Recommendation
It is recommended to update Windows to the latest version to patch this vulnerability and to monitor access to the system.
Other vulnerabilities in Windows Remote Desktop
See all- CVE-2026-26151High
Insufficient UI warnings of dangerous operations in Windows Remote Desktop allow an unauthorized attacker to perform spoofing over a network.
- CVE-2023-35352High
A vulnerability in Windows Remote Desktop allows for a security feature bypass, potentially leading to unauthorized access to the system.
Original NVD description (English source)
Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.