CVE-2026-26151

Insufficient ui warning of dangerous operations in Windows Remote Desktop allows an unauthorized attacker to perform spoofing over a network.

Scoring

Severity

HIGH

CVSS base score

7.1

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C

EPSS probability

0.83%

CWE

CWE-357

Published

2026-04-14

Last modified

2026-08-14

Affected products

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Microsoft Windows 10 Version 22H2
• Microsoft Windows 11 version 22H3
• Microsoft Windows 11 Version 23H2
• Microsoft Windows 11 Version 24H2
• Microsoft Windows 11 Version 25H2

Weakness type

• CWE-357

Related vulnerabilities

• CVE-2026-58597 — Microsoft Edge (Chromium-based) Spoofing Vulnerability
• CVE-2026-47782 — Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents...
• CVE-2025-47967 — Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
• CVE-2025-33054 — Remote Desktop Spoofing Vulnerability
• CVE-2025-49587 — XWiki does not require right warnings for notification displayer objects
• CVE-2025-49585 — XWiki does not require right warnings for XClass definitions
• CVE-2025-49583 — XWiki provides no warning when granting XWiki.Notifications.Code.NotificationEmailRendererClass admin right
• CVE-2025-49582 — XWiki's required right warnings for macros are incomplete

Markdown version · Browse all CVEs