CVE-2026-50666
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
Windows Remote Access Connection Manager has a use-after-free vulnerability that allows an authorized attacker to elevate privileges over a network.
Risk Assessment
An authorized user can gain elevated privileges, potentially taking control of the system.
Recommendation
Apply the appropriate security update from Microsoft for Windows Remote Access Connection Manager.
Other vulnerabilities in Windows Remote Access Connection Manager
See all- CVE-2026-62783High
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-62758High
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- CVE-2024-38240High
Elevation of privilege vulnerability in Windows Remote Access Connection Manager. Allows an attacker to gain higher privileges on the system.
- CVE-2024-30069Medium
A vulnerability in Windows Remote Access Connection Manager could lead to information disclosure. An attacker may exploit this flaw to access sensitive data stored on the system.
- CVE-2021-34457Medium
Information disclosure vulnerability in the Windows Remote Access Connection Manager. It may allow an attacker to access information that should be protected.
- CVE-2021-34456High
A vulnerability in the Windows Remote Access Connection Manager allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
- CVE-2021-34454Medium
Information disclosure vulnerability in the Windows Remote Access Connection Manager. It may allow an attacker to access information that should be protected.
- CVE-2021-34445High
Elevation of privilege vulnerability in the Windows Remote Access Connection Manager. It allows a local attacker to gain elevated privileges.
- CVE-2021-33773High
Elevation of privilege vulnerability in the Windows Remote Access Connection Manager. It allows a local attacker to gain elevated privileges.
- CVE-2021-33763Medium
Information disclosure vulnerability in the Windows Remote Access Connection Manager. It may allow an attacker to access information that should be protected.
Original NVD description (English source)
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network.