CVE-2026-87698

MediumCVSS 5.5

Published: 13/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

22th percentile - higher than 22% of all known CVEs

Summary

Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally. The vulnerability may result in leakage of process memory data.

Risk Assessment

An attacker with local access could read sensitive information from memory, potentially facilitating further attacks or exposing confidential data. The risk is limited to the local context.

Recommendation

Apply security patches for Windows Remote Access Service promptly and monitor for unusual service process behavior.

Other vulnerabilities in Windows Remote Access Service

CVE-2026-56647High
Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network.

Original NVD description (English source)

Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS