CVE-2026-84012
HighCVSS 8.1Summary
Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
Risk Assessment
An unauthenticated attacker can remotely execute code, potentially leading to full system compromise and lateral movement.
Recommendation
Apply available security updates from the operating system vendor.
Other vulnerabilities in Remote Desktop Gateway Service
See all- CVE-2026-70187High
A use after free vulnerability in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
- CVE-2026-70033High
A missing release of memory after effective lifetime vulnerability exists in the Remote Desktop Gateway Service. An unauthorized attacker can exploit this flaw to deny service over a network.
- CVE-2026-69338High
Use-after-free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69292High
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS