CVE-2026-69485

HIGH CVSS 3.1: 8.8 EPSS 0.91%
Updated Sep 21, 2026
Microsoft
Parameter Value
CVSS 8.8 (HIGH)
Affected Versions 10.0.14393.0 — 10.0.28000.2954
Fixed In 10.0.17763.9245
Type CWE-908 (Use of Uninitialized Resource)
Vendor Microsoft
Public PoC No

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service

CVSS Vector v3.1

Vulnerable Products 16

Configuration From (including) Up to (excluding)
Microsoft Windows_10_1809
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*
10.0.17763.0 10.0.17763.9245
Microsoft Windows_Server_2019
cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
10.0.17763.0 10.0.17763.9245
Microsoft Windows_Server_2019
cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
10.0.17763.0 10.0.17763.9245
Microsoft Windows_Server_2022
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
10.0.20348.0 10.0.20348.5622
Microsoft Windows_10_21h2
cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*
10.0.19044.0 10.0.19044.7725
Microsoft Windows_10_22h2
cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*
10.0.19045.0 10.0.19045.7725
Microsoft Windows_Server_2025
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*
10.0.26100.0 10.0.26100.33438
Microsoft Windows_11_25h2
cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*
10.0.26200.0 10.0.26200.9445
Microsoft Windows_11_23h2
cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*
10.0.22631.0 10.0.22631.7582
Microsoft Windows_11_23h2
cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*
10.0.22631.0 10.0.22631.7582
Microsoft Windows_11_24h2
cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*
10.0.26100.0 10.0.26100.9445
Microsoft Windows_Server_2025
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*
10.0.26100.0 10.0.26100.33438
Microsoft Windows_11_26h1
cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*
10.0.28000.0 10.0.28000.2954
Microsoft Windows_10_1607
cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*
10.0.14393.0 10.0.14393.9512
Microsoft Windows_Server_2016
cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
10.0.14393.0 10.0.14393.9512
Microsoft Windows_Server_2016
cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
10.0.14393.0 10.0.14393.9512