CVE-2026-58626
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk54th percentile - higher than 54% of all known CVEs
Summary
Use after free vulnerability in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
Risk Assessment
Risk of remote code execution by an authorized user, potentially leading to system takeover.
Recommendation
Install the latest Windows security updates from Microsoft.
Other vulnerabilities in Windows Remote Desktop Services
See all- CVE-2026-62692High
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-61367High
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-61365High
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-61364High
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-61356High
Missing authentication for a critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-50369High
A use-after-free vulnerability in Windows Remote Desktop Services allows an authenticated attacker to elevate privileges over a network.
Original NVD description (English source)
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.