Nov 2026: Windows Remote Desktop Services Elevation of Privilege Vulnerability
CVE-2026-122166 Published on November 10, 2026
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
Vulnerability Analysis
Exploitation:
NONE
Automatable:
NO
Technical Impact:
TOTAL
Weakness Type
What is a Stack Overflow Vulnerability?
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CVE-2026-122166 has been classified to as a Stack Overflow vulnerability or weakness.
Products Associated with CVE-2026-122166
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
