← Database
CVE-2025-26671
HIGH
CVSS: 8.1
Published: 2025-04-08
Modified: 2026-06-17
Description
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
Affected Platforms
Microsoft Windows Server 2016Microsoft Windows Server 2019Microsoft Windows Server 2008Microsoft Windows Server 2022Microsoft Windows Server 2012Microsoft Windows Server 2025Microsoft Windows Server 2022 23H2
Weakness Type
CWE-416, CWE-591