CVE-2026-69536

Microsoft · Published September 8, 2026

7.1

CVSS v3.1

HIGH

Patch availableGet patch

Description

Remote Desktop Services Remote Code Execution Vulnerability. Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

Affected Products

Windows Server 2025 (Server Core installation)
Windows 11 Version 25H2 for ARM64-based Systems
Windows 11 Version 25H2 for x64-based Systems
Windows 11 Version 23H2 for ARM64-based Systems

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C