CVE Catalog
CVE-2026-61367
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.28%
20th percentile - higher than 20% of all known CVEs
Summary
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit the missing authentication to gain elevated privileges, potentially leading to unauthorized system access.
Recommendation
Apply the latest security updates from Microsoft.
Original NVD description (English source)
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.