CVE-2026-70570

HighCVSS 8.1/10Last modified Sep 24, 2026

Description

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Sep 8, 2026
Last modified
Sep 24, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-705718.1Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.CVE-2026-705727.8Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.CVE-2026-705737.0Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.CVE-2026-705747.8Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.CVE-2026-705756.5Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network.CVE-2026-705777.0Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.CVE-2026-705787.0Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally.CVE-2026-705797.5Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network.CVE-2026-70587.3A vulnerability has been found in 666ghj MiroFish up to 0.1.2. The impacted element is the function SimulationIPCClient.send_command of the CVE-2026-705808.8Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.CVE-2026-705817.8Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.CVE-2026-705826.4Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an
CVE-2026-70570: High severity, CVSS 8.1 | Vulnix