WID-SEC-W-2026-2401

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Windows: Mehrere Schwachstellen

view advisory published 2026-07-19

Ein Angreifer kann mehrere Schwachstellen im Microsoft Windows Backup Service, Microsoft Windows Admin Center und Microsoft Windows Remote Desktop Web Client ausnutzen, um Informationen offenzulegen und um erweiterte Rechte zu erlangen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-56171UShigh7.5—
Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network.
CVE-2026-58598US——
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan