CVE-2026-61367
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVSS
7.8
Alto
EPSS
—
KEV
—
Exploit Today
—
0-100
Publicado: 11 ago 2026 · Última mod.: 11 ago 2026 · CWE-306
Sin historial EPSS suficiente todavía.
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-649218.8 ALT—
———Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.6hCVE-2026-627777.8 ALT—
———Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally.6hCVE-2026-613657.8 ALT—
———Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.6hCVE-2026-613647.8 ALT—
———Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.6hCVE-2026-613567.8 ALT—
———Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.6hCVE-2026-505169.4 CRÍ—
———Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.6h