EUVD-2026-73225
GHSA-g6xw-vg78-j548
Severity by source
AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Network-exploitable via RD Gateway (AV:N), but requires valid credentials (PR:L), user interaction (UI:R), and specific timing conditions consistent with a use-after-free race (AC:H); full C/I/A reflects privilege escalation impact.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.
AnalysisAI
Use-after-free in Windows Remote Desktop Gateway Service enables an authorized network attacker to escalate privileges, with full confidentiality, integrity, and availability impact on affected Windows Server hosts. The vulnerability spans Windows Server 2012 through 2025 and specific Windows 10 builds, all addressed by patched builds released by Microsoft. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must hold valid credentials sufficient for at least low-privilege network access to the RD Gateway service, as reflected by PR:L in the CVSS vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.1 score reflects meaningful real-world constraints: while the attack vector is network (AV:N), high complexity (AC:H) and required user interaction (UI:R) significantly limit opportunistic mass exploitation - both conditions must align simultaneously with a valid credential (PR:L), ruling out anonymous internet-scale attack campaigns. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft-released security update for the applicable Windows Server version, targeting the following minimum build thresholds: Windows Server 2025 to 10.0.26100.33438 or later, Windows Server 2022 to 10.0.20348.5622 or later, Windows Server 2019 to 10.0.17763.9245 or later, Windows Server 2016 to 10.0.14393.9512 or later, Windows Server 2012 R2 to 6.3.9600.23397 or later, and Windows Server 2012 to 6.2.9200.26349 or later. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Windows Server 2012-2025 and affected Windows 10 systems running Remote Desktop Gateway Service, paying particular attention to those exposed to untrusted networks or the internet. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-416 – Use After Free
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today