CVE-2026-49791

HIGH

Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

Title source: cna
STIX 2.1

Description

Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

References (1)

Core 1
Core References
Vendor Advisory vendor-advisory patch
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49791

Scores

CVSS v3 7.1
EPSS 0.0028
EPSS Percentile 20.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-59
Status published
Products (33)
Microsoft/Windows 10 Version 1607 10.0.14393.0 - 10.0.14393.9339
Microsoft/Windows 10 Version 1809 10.0.17763.0 - 10.0.17763.9020
Microsoft/Windows 10 Version 21H2 10.0.19044.0 - 10.0.19044.7548
Microsoft/Windows 10 Version 22H2 10.0.19045.0 - 10.0.19045.7548
Microsoft/Windows 11 Version 24H2 10.0.26100.0 - 10.0.26100.8875
Microsoft/Windows 11 Version 25H2 10.0.26200.0 - 10.0.26200.8875
Microsoft/Windows 11 version 26H1 10.0.28000.0 - 10.0.28000.2269
Microsoft/Windows 11 version 26H1 10.0.28000.0 - 10.0.28000.2525
Microsoft/Windows Server 2012 6.2.9200.0 - 6.2.9200.26226
Microsoft/Windows Server 2012 (Server Core installation) 6.2.9200.0 - 6.2.9200.26226
... and 23 more
Published Jul 14, 2026
Tracked Since Jul 14, 2026