CVE-2026-69518
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker could remotely take control of the system via Remote Desktop service, potentially leading to full system compromise.
Recommendation
Apply security patches for Windows Remote Desktop and restrict RDP access to trusted networks only.
Other vulnerabilities in Windows Remote Desktop
See all- CVE-2026-40398High
Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
- CVE-2026-26151High
Insufficient UI warnings of dangerous operations in Windows Remote Desktop allow an unauthorized attacker to perform spoofing over a network.
- CVE-2023-35352High
A vulnerability in Windows Remote Desktop allows for a security feature bypass, potentially leading to unauthorized access to the system.
Original NVD description (English source)
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS