Windows Remote Access Connection Manager
by Microsoft
CVEs (34)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-71352 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network. | ||
| CVE-2026-21525 | Med | 0.53 | 6.2 | 0.05 | KEV | Feb 10, 2026 | Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally. | |
| CVE-2024-38240 | Hig | 0.53 | 8.1 | 0.01 | Sep 10, 2024 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | ||
| CVE-2026-71343 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally. | ||
| CVE-2026-69455 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62783 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62758 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-62472 | Hig | 0.51 | 7.8 | 0.02 | Dec 9, 2025 | Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-47955 | Hig | 0.51 | 7.8 | 0.01 | Jun 10, 2025 | Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | ||
| CVE-2024-30079 | Hig | 0.51 | 7.8 | 0.01 | Jul 9, 2024 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | ||
| CVE-2022-21914 | Hig | 0.51 | 7.8 | 0.01 | Jan 11, 2022 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | ||
| CVE-2022-21885 | Hig | 0.51 | 7.8 | 0.01 | Jan 11, 2022 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | ||
| CVE-2021-43223 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | ||
| CVE-2021-34445 | Hig | 0.51 | 7.8 | 0.01 | Jul 16, 2021 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | ||
| CVE-2021-33773 | Hig | 0.51 | 7.8 | 0.01 | Jul 14, 2021 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | ||
| CVE-2026-71342 | Hig | 0.46 | 7.0 | 0.00 | Sep 8, 2026 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-71333 | Hig | 0.46 | 7.0 | 0.00 | Sep 8, 2026 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69331 | Hig | 0.46 | 7.0 | 0.00 | Sep 8, 2026 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-72966 | Med | 0.36 | 5.5 | 0.00 | Sep 8, 2026 | Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally. | ||
| CVE-2024-30039 | Med | 0.36 | 5.5 | 0.01 | May 14, 2024 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
- risk 0.57cvss 8.8epss 0.01
Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.
- risk 0.53cvss 6.2epss 0.05
Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.
- risk 0.53cvss 8.1epss 0.01
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.02
Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.01
Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.01
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- risk 0.36cvss 5.5epss 0.00
Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.
- risk 0.36cvss 5.5epss 0.01
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Page 1 of 2