CVE-2026-70033
HighCVSS 7.5Summary
A missing release of memory after effective lifetime vulnerability exists in the Remote Desktop Gateway Service. An unauthorized attacker can exploit this flaw to deny service over a network.
Risk Assessment
An unauthenticated attacker on the network can remotely cause a denial of service, potentially making the Remote Desktop Gateway service unavailable to authorized users.
Recommendation
Apply security updates for the Remote Desktop Gateway Service and restrict network access to this service from untrusted networks.
Other vulnerabilities in Remote Desktop Gateway Service
See all- CVE-2026-84012High
Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
- CVE-2026-70187High
A use after free vulnerability in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
- CVE-2026-69338High
Use-after-free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69292High
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS