CVE-2026-69292
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could gain elevated privileges, potentially leading to full system compromise.
Recommendation
Apply the available security update from the vendor.
Other vulnerabilities in Remote Desktop Gateway Service
See all- CVE-2026-84012High
Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
- CVE-2026-70187High
A use after free vulnerability in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
- CVE-2026-70033High
A missing release of memory after effective lifetime vulnerability exists in the Remote Desktop Gateway Service. An unauthorized attacker can exploit this flaw to deny service over a network.
- CVE-2026-69338High
Use-after-free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS