安全研究

安全漏洞
Microsoft Windows Remote Assistance保护机制失效漏洞(CVE-2026-20824)

发布日期:2026-01-13
更新日期:2026-05-09

受影响系统:
Microsoft Windows Remote Assistance Windows 10 Version 1809 for x6
Microsoft Windows Remote Assistance Windows 10 Version 1809 for 32
描述:
CVE(CAN) ID: CVE-2026-20824

Microsoft Windows Remote Assistance是美国微软(Microsoft)公司的一个windows功能,用于查看或控制远程Windows计算机以解决问题,而无需直接接触设备。
Microsoft Windows Remote Assistance存在保护机制失效漏洞,该漏洞源于程序未对输入内容进行正确处理,攻击者利用该漏洞可以绕过某些功能,以下产品和版本受到影响:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows Server 2019,Windows Server 2019 (Server Core installation),Windows Server 2022,Windows Server 2022 (Server Core installation),Windows 10 Version 21H2 for 32-bit Systems,Windows 10 Version 21H2 for ARM64-based Systems,Windows 10 Version 21H2 for x64-based Systems,Windows 10 Version 22H2 for x64-based Systems,Windows 10 Version 22H2 for ARM64-based Systems,Windows 10 Version 22H2 for 32-bit Systems,Windows Server 2025 (Server Core installation),Windows 11 Version 25H2 for ARM64-based Systems,Windows 11 Version 25H2 for x64-based Systems,Windows 11 Version 23H2 for ARM64-based Systems,Windows 11 Version 23H2 for x64-based Systems,Windows Server 2022, 23H2 Edition (Server Core installation),Windows 11 Version 24H2 for ARM64-based Systems,Windows 11 Version 24H2 for x64-based Systems,Windows Server 2025,Windows 10 Version 1607 for 32-bit Systems,Windows 10 Version 1607 for x64-based Systems,Windows Server 2016,Windows Server 2016 (Server Core installation),Windows Server 2012,Windows Server 2012 (Server Core installation),Windows Server 2012 R2,Windows Server 2012 R2 (Server Core installation)。

<**>

建议:
厂商补丁:

Microsoft
---------
目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:

http://technet.microsoft.com/security/bulletin/

浏览次数:51
严重程度:0(网友投票)
本安全漏洞由绿盟科技翻译整理,版权所有,未经许可,不得转载
绿盟科技给您安全的保障