CVE-2026-61365

Published August 11, 2026 · Source: nvd

Analysis

## Summary
CVE-2026-61365 describes missing authentication for a critical function in Windows Remote Desktop Services. An authorized attacker can leverage the flaw to elevate privileges locally.

## Technical Details
- Root issue: Missing authentication for a critical function in Windows Remote Desktop Services.
- CWE: CWE-306 (Missing Authentication for Critical Function).
- CVSS (as provided): 7.8 with vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

## Affected
- Product/component: Windows Remote Desktop Services.

## Impact
- Privilege escalation from an authorized local context.
- High impact on confidentiality, integrity, and availability (C:H, I:H, A:H).

## Mitigation
1. Apply vendor security updates/patches for Windows Remote Desktop Services addressing CVE-2026-61365 (no patch details were available from references).
2. Restrict local access to Remote Desktop Services to the minimum required users/roles to reduce the chance of an “authorized attacker” scenario.
3. Monitor for suspicious local activity involving Remote Desktop Services and privilege changes, and investigate anomalies promptly.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-306

Affected Products

• microsoft — windows 10 1607 (< 10.0.14393.9418)
• microsoft — windows 10 1809 (< 10.0.17763.9115)
• microsoft — windows 10 21h2 (< 10.0.19044.7663)
• microsoft — windows 10 22h2 (< 10.0.19045.7663)
• microsoft — windows 11 23h2 (< 10.0.22631.7517)
• microsoft — windows 11 24h2 (< 10.0.26100.9106)
• microsoft — windows 11 25h2 (< 10.0.26200.9106)
• microsoft — windows 11 26h1 (< 10.0.28000.2704)
• microsoft — windows server 2012 (-)
• microsoft — windows server 2016 (< 10.0.14393.9418)
• microsoft — windows server 2019 (< 10.0.17763.9115)
• microsoft — windows server 2022 (< 10.0.20348.5440)
• microsoft — windows server 2025 (< 10.0.26100.33222)

References

• [email protected]

← Browse all CVEs