Vigie VulnDBEuropean-hosted Vulnerability DB
EN
Menu

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (Microsoft Windows 10 Version 1607)

CVE-2026-62819
HIGH 8.1

En bref

Source
NVD
EPSS
EPSS 0.71 % · centile 53 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
microsoft
Statut NVD
Analyzed

Rechercher sur…

Description

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Faiblesses (CWE)

  • CWE-416 — Utilisation après libération

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1HIGH 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:Cmicrosoft
CVSS 3.1HIGH 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HNVD · secure@microsoft.com (Secondary)

Références européennes

Avis du CERT-FR

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Microsoft · Windows 10 Version 1607affected 10.0.14393.0 < 10.0.14393.9418
Microsoft · Windows 10 Version 1809affected 10.0.17763.0 < 10.0.17763.9121
Microsoft · Windows 10 Version 21H2affected 10.0.19044.0 < 10.0.19044.7663
Microsoft · Windows 10 Version 22H2affected 10.0.19045.0 < 10.0.19045.7663
Microsoft · Windows 11 version 23H2affected 10.0.22631.0 < 10.0.22631.7517
Microsoft · Windows 11 Version 23H2affected 10.0.22631.0 < 10.0.22631.7517
Microsoft · Windows 11 Version 24H2affected 10.0.26100.0 < 10.0.26100.9168
Microsoft · Windows 11 Version 25H2affected 10.0.26200.0 < 10.0.26200.9168
Microsoft · Windows 11 version 26H1affected 10.0.28000.0 < 10.0.28000.2704
Microsoft · Windows Server 2012affected 6.2.9200.0 < 6.2.9200.26280
Microsoft · Windows Server 2012 (Server Core installation)affected 6.2.9200.0 < 6.2.9200.26280
Microsoft · Windows Server 2012 R2affected 6.3.9600.0 < 6.3.9600.23338
Microsoft · Windows Server 2012 R2 (Server Core installation)affected 6.3.9600.0 < 6.3.9600.23338
Microsoft · Windows Server 2016affected 10.0.14393.0 < 10.0.14393.9418
Microsoft · Windows Server 2016 (Server Core installation)affected 10.0.14393.0 < 10.0.14393.9418
Microsoft · Windows Server 2019affected 10.0.17763.0 < 10.0.17763.9121
Microsoft · Windows Server 2019 (Server Core installation)affected 10.0.17763.0 < 10.0.17763.9121
Microsoft · Windows Server 2022affected 10.0.20348.0 < 10.0.20348.5499
Microsoft · Windows Server 2025affected 10.0.26100.0 < 10.0.26100.33296
Microsoft · Windows Server 2025 (Server Core installation)affected 10.0.26100.0 < 10.0.26100.33296

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD