Description
Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
Published: 2026-10-13
Score: 8.1 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Patch ASAP
AI Analysis

Impact

The vulnerability is a double free in the Remote Desktop Gateway Service, allowing an attacker to run arbitrary code when they send specially crafted data over the network. This flaw directly compromises the integrity and confidentiality of the target host and can lead to full system compromise. The weakness corresponds to CWE-415.

Affected Systems

Affected are Microsoft Windows 10 version 1607 and 1809, Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025, including both full and Server Core installations. The Remote Desktop Gateway Service on these operating systems processes Remote Desktop connections, so any machine running the service is vulnerable unless patched.

Risk and Exploitability

The CVSS base score is 8.1, indicating high severity. No EPSS score is publicly available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is through a remote network connection to the Remote Desktop Gateway Service; a properly authenticated or unauthenticated remote user could exploit the double free by sending malicious data, leading to code execution on the host.

Generated by OpenCVE AI on October 17, 2026 at 00:22 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Download and install the Microsoft security update for CVE-2026-84012 from the Microsoft Update Catalog or the official update guide.
  • After applying the patch, configure the Remote Desktop Gateway Service to accept connections only from trusted networks and consider limiting or blocking public IP ranges.
  • If the Remote Desktop Gateway Service is not required, disable or uninstall the service to reduce the attack surface.

Generated by OpenCVE AI on October 17, 2026 at 00:22 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 19 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*

Sun, 18 Oct 2026 11:45:00 +0000

Type Values Removed Values Added
First Time appeared Microsoft windows Server 2012 (server Core Installation)
Microsoft windows Server 2012 R2
Microsoft windows Server 2012 R2 (server Core Installation)
Microsoft windows Server 2016 (server Core Installation)
Microsoft windows Server 2019 (server Core Installation)
Microsoft windows Server 2025 (server Core Installation)
Vendors & Products Microsoft windows Server 2012 (server Core Installation)
Microsoft windows Server 2012 R2
Microsoft windows Server 2012 R2 (server Core Installation)
Microsoft windows Server 2016 (server Core Installation)
Microsoft windows Server 2019 (server Core Installation)
Microsoft windows Server 2025 (server Core Installation)

Tue, 13 Oct 2026 22:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 19:15:00 +0000

Type Values Removed Values Added
Description Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
Title Windows Remote Desktop Services Remote Code Execution Vulnerability
First Time appeared Microsoft
Microsoft windows 10 1607
Microsoft windows 10 1809
Microsoft windows Server 2012
Microsoft windows Server 2012 R2
Microsoft windows Server 2016
Microsoft windows Server 2019
Microsoft windows Server 2022
Microsoft windows Server 2025
Weaknesses CWE-415
CPEs cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*
Vendors & Products Microsoft
Microsoft windows 10 1607
Microsoft windows 10 1809
Microsoft windows Server 2012
Microsoft windows Server 2012 R2
Microsoft windows Server 2016
Microsoft windows Server 2019
Microsoft windows Server 2022
Microsoft windows Server 2025
References
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C'}

Subscriptions

Microsoft Windows 10 1607 Windows 10 1809 Windows Server 2012 Windows Server 2012 (server Core Installation) Windows Server 2012 R2 Windows Server 2012 R2 Windows Server 2012 R2 (server Core Installation) Windows Server 2016 Windows Server 2016 (server Core Installation) Windows Server 2019 Windows Server 2019 (server Core Installation) Windows Server 2022 Windows Server 2025 Windows Server 2025 (server Core Installation)
cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2026-10-31T18:04:02.783Z

Reserved: 2026-09-01T01:16:35.986Z

Link: CVE-2026-84012

cve-icon Vulnrichment

Updated: 2026-10-13T20:16:24.004Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-13T19:20:51.213

Modified: 2026-10-19T15:15:25.870

Link: CVE-2026-84012

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-18T11:30:05Z

Weaknesses