CVE-2026-69338
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
Use-after-free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.
Risk Assessment
An attacker with network access could gain elevated privileges, potentially leading to full system compromise.
Recommendation
Apply the latest security updates from the vendor for Remote Desktop Gateway Service.
Other vulnerabilities in Remote Desktop Gateway Service
See all- CVE-2026-84012High
Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
- CVE-2026-70187High
A use after free vulnerability in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
- CVE-2026-70033High
A missing release of memory after effective lifetime vulnerability exists in the Remote Desktop Gateway Service. An unauthorized attacker can exploit this flaw to deny service over a network.
- CVE-2026-69292High
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS