Microsoft Windows Remote Help flaws patched
CERT-FR advisory covers two Microsoft Windows Remote Help vulnerabilities allowing security bypass and denial of service.
CERT-FR has issued an advisory (CERTFR-2026-AVI-1073) covering two vulnerabilities affecting Microsoft Windows Remote Help versions prior to 5.2.1040.0. The flaws, tracked as CVE-2026-55013 and CVE-2026-55015, could allow an attacker to bypass security policy controls and cause a denial of service condition. No indication of active exploitation is provided in the advisory.
Microsoft published corresponding security bulletins on 20 August 2026. Organizations using Windows Remote Help should apply the vendor-supplied patches referenced in the Microsoft Security Response Center update guide to remediate these issues. This is a routine patch advisory with no evidence of in-the-wild exploitation.
Mentioned in this report
Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1073
This is the public brief
Subscribers see the full picture: extracted IOCs, ready-to-deploy detections (Sigma, Splunk, KQL, Elastic, YARA, Suricata), the entity graph, TAXII 2.1 feed and real-time alerts matched to your sectors.
Start free