Microsoft Windows Remote Desktop Privilege Escalation Vulnerability

A heap-based buffer overflow vulnerability has been identified in Windows Remote Desktop Services. This vulnerability allows an authorized attacker to locally elevate privileges, potentially gaining SYSTEM privileges. The issue arises from a heap-based buffer overflow, which can be exploited to manipulate memory and execute arbitrary code with elevated rights.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability, which is included in the May 2026 security updates. Instructions for downloading the security update are available on the Microsoft Update Catalog.