CVE-2026-61356

Windows Remote Desktop Services is vulnerable due to a missing authentication mechanism for a critical function, enabling an authorized attacker to escalate privileges locally. This flaw poses a significant risk as it could allow attackers to gain elevated access to sensitive system resources. Organizations utilizing Windows Remote Desktop Services should prioritize patching this vulnerability to mitigate potential exploitation.