Windows Remote Desktop Services vulnerabilities
16 known CVE vulnerabilities in Windows Remote Desktop Services, translated and rated.
- CVE-2026-69525Critical
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
- CVE-2026-80096High
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69616Medium
An out-of-bounds read vulnerability in Windows Remote Desktop Services allows an authorized attacker to disclose information locally.
- CVE-2026-69599High
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
- CVE-2026-69539High
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
- CVE-2026-69536High
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
- CVE-2026-69514High
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
- CVE-2026-69475High
Untrusted pointer dereference in Windows Remote Desktop Services. Allows an authorized attacker to elevate privileges locally.
- CVE-2026-69287High
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-62692High
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-61367High
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-61365High
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-61364High
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-61356High
Missing authentication for a critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-58626High
Use after free vulnerability in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
- CVE-2026-50369High
A use-after-free vulnerability in Windows Remote Desktop Services allows an authenticated attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

