EUVD-2026-73106
GHSA-vj4g-p3xx-pxm5
Severity by source
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Local vector with low-privilege access matches RRAS service attack surface; AC:H reflects double-free heap-grooming complexity; full C/I/A reflects SYSTEM-level privilege escalation outcome.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
AnalysisAI
Local privilege escalation in Windows Routing and Remote Access Service (RRAS) via a double-free memory corruption flaw (CWE-415) allows an attacker with low-privileged local access to achieve full system compromise across a broad range of Windows 10, Windows 11, and Windows Server versions from 2012 through 2025. Exploitation requires high attack complexity, consistent with the race-condition or precise heap-state manipulation typically needed to weaponize double-free primitives. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an attacker to already hold a valid, low-privileged local account or active local session on the target Windows system (PR:L, AV:L). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS 3.1 base score of 7.0 (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) accurately captures the threat model: local access with low privileges is required, but exploitation is complex. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-released cumulative updates to the patched build versions listed in the affected products section - specific target builds are identified per OS version in the EUVD data (e.g., Windows Server 2025 to 10.0.26100.33438, Windows 11 24H2 to 10.0.26100.9445, Windows Server 2019 to 10.0.17763.9245). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, use asset inventory and endpoint management tools to identify all systems running Windows 10, 11, and Windows Server 2012-2025; prioritize Windows Server 2022, 2025, and Windows 11 deployments in production infrastructure. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-415 – Double Free
View allShare
External POC / Exploit Code
Leaving vuln.today