CVE Watch11 ago 2026

CVE-2026-61352

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized

CVSS

7.5

Alto

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 11 ago 2026 · Última mod.: 11 ago 2026 · CWE-362

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Referencias oficiales

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61352

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-668028.1 ALT

—

———Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network.9h CVE-2026-629087.0 ALT

—

———Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.6h CVE-2026-628208.1 ALT

—

———Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute code over a network.8h CVE-2026-627807.0 ALT

—

———Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.9h CVE-2026-627788.1 ALT

—

———Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.6h CVE-2026-627487.0 ALT

—

———Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.6h