EUVD-2026-73214
GHSA-vw2q-jv7c-h35x
Severity by source
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Local access with low privilege required; double-free heap exploitation demands precise memory layout (AC:H); full system compromise on success justifies C:H/I:H/A:H.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
5DescriptionCVE.org
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.
AnalysisAI
Privilege escalation in the Windows Remote Desktop Gateway Service allows a low-privileged authorized attacker to achieve full system compromise via a double-free memory corruption flaw (CWE-415). Affected systems span Windows Server 2012 through 2025 and select Windows 10 builds where the RD Gateway role is installed. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires low-privilege authenticated access to the target Windows Server (PR:L, AV:L) - the attacker must be able to log on locally or run processes on the affected host. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.0 score (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) captures the essential tension: successful exploitation yields a full three-way C:H/I:H/A:H impact, but the attacker must already have low-privilege local access and must overcome high attack complexity requiring careful heap manipulation. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply Microsoft's security updates for CVE-2026-69292 via Windows Update, WSUS, or Microsoft Update Catalog, targeting the patched build versions listed in the affected products section for each respective Windows Server and Windows 10 release. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, create a complete inventory of systems running Windows Remote Desktop Gateway across all affected versions (Server 2012, 2016, 2019, 2022, 2025 and applicable Windows 10 builds), with priority tagging for systems supporting critical or high-availability remote access services. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-415 – Double Free
View allShare
External POC / Exploit Code
Leaving vuln.today