What is the CVSS score of CVE-2026-70570?

CVE-2026-70570 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of Microsoft are affected by CVE-2026-70570?

Windows Routing and Remote Access Service (RRAS) contains a use-after-free vulnerability enabling unauthenticated attackers on adjacent networks to execute arbitrary code with full system privileges…. A patch is available.

How to fix or mitigate CVE-2026-70570?

Within 24 hours: identify and inventory all Windows systems running RRAS (Server 2012 through 2025, Windows 10/11 versions) and assess network exposure to untrusted adjacent networks, prioritizing internet-facing VPN endpoints and remote access gateways. Within 7 days: deploy Microsoft's released patches to all RRAS-enabled systems and disable RRAS on any systems where it is not operationally required. Within 30 days: complete patching verification across the entire Windows infrastructure, implement network segmentation to restrict layer-2 adjacent-network access to RRAS-enabled servers, and conduct forensic review of systems accessible from untrusted networks for unauthorized access or lateral movement indicators.

Microsoft CVE-2026-70570

EUVD-2026-73728 HIGH

Use After Free (CWE-416)

2026-09-08 secure@microsoft.com

GHSA-3p7c-fr6q-wvh6

Authentication Bypass RCE Use After Free Memory Corruption Microsoft

7.5

CVSS 3.1 · Vendor: microsoft

Severity by source

Vendor (microsoft) PRIMARY

7.5 HIGH

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (microsoft) · only source for this CVE.

CVSS VectorVendor: microsoft

Attack Vector

Adjacent

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Sep 09, 2026 - 00:53 vuln.today

Patch available

Sep 08, 2026 - 18:35 EUVD

CVE Published

Sep 08, 2026 - 18:20 nvd

HIGH 7.5

DescriptionCVE.org

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

AnalysisAI

Use-After-Free (CWE-416) in the Windows Routing and Remote Access Service enables an unauthenticated attacker positioned on an adjacent network to execute arbitrary code on affected Windows systems. The vulnerability spans a wide range of Microsoft platforms from Windows Server 2012 through Windows Server 2025 and Windows 10/11 client versions, making the exposure surface substantial in enterprise environments where RRAS is deployed as a VPN or routing endpoint. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Recommended ActionAI

Within 24 hours: identify and inventory all Windows systems running RRAS (Server 2012 through 2025, Windows 10/11 versions) and assess network exposure to untrusted adjacent networks, prioritizing internet-facing VPN endpoints and remote access gateways. …

Threat intelligence, references, and detailed analysis are available after sign-in.