CVE-2026-62819

HighCVSS 8.1/10Last modified Aug 16, 2026

Description

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Aug 11, 2026
Last modified
Aug 16, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-62828.1A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remoteCVE-2026-628208.1Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker tCVE-2026-628228.8Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.CVE-2026-628238.8Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.CVE-2026-628248.8Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-628259.8Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.CVE-2026-628265.4Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attCVE-2026-628278.8Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-628285.4Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network.CVE-2026-628295.4Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attCVE-2026-62835.4Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Information Technologies InCVE-2026-628309.9Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
CVE-2026-62819: High severity, CVSS 8.1 | Vulnix