Windows Remote Access Connection Manager vulnerabilities
23 known CVE vulnerabilities in Windows Remote Access Connection Manager, translated and rated.
- CVE-2026-85867High
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-21525MediumActively exploited
A null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to cause a denial of service locally.
- CVE-2025-59230HighActively exploited
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. The flaw concerns the access control mechanism within this Windows component.
- CVE-2026-72966Medium
Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.
- CVE-2026-71352High
Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.
- CVE-2026-71343High
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally.
- CVE-2026-71342High
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-71333High
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-69455High
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-69331High
Use-after-free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-62783High
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-62758High
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-50666High
Windows Remote Access Connection Manager has a use-after-free vulnerability that allows an authorized attacker to elevate privileges over a network.
- CVE-2025-62474High
A vulnerability in Windows Remote Access Connection Manager is due to improper access control. An authorized attacker can elevate privileges locally.
- CVE-2025-62472High
Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- CVE-2024-38240High
Elevation of privilege vulnerability in Windows Remote Access Connection Manager. Allows an attacker to gain higher privileges on the system.
- CVE-2024-30069Medium
A vulnerability in Windows Remote Access Connection Manager could lead to information disclosure. An attacker may exploit this flaw to access sensitive data stored on the system.
- CVE-2021-34457Medium
Information disclosure vulnerability in the Windows Remote Access Connection Manager. It may allow an attacker to access information that should be protected.
- CVE-2021-34456High
A vulnerability in the Windows Remote Access Connection Manager allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
- CVE-2021-34454Medium
Information disclosure vulnerability in the Windows Remote Access Connection Manager. It may allow an attacker to access information that should be protected.
- CVE-2021-34445High
Elevation of privilege vulnerability in the Windows Remote Access Connection Manager. It allows a local attacker to gain elevated privileges.
- CVE-2021-33773High
Elevation of privilege vulnerability in the Windows Remote Access Connection Manager. It allows a local attacker to gain elevated privileges.
- CVE-2021-33763Medium
Information disclosure vulnerability in the Windows Remote Access Connection Manager. It may allow an attacker to access information that should be protected.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

