KB5058379: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (May 2025)

The remote Windows host is missing security update 5058379. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of uninitialized resource in Windo...

KB5058403: Windows Server 2012 R2 Security Update (May 2025)

The remote Windows host is missing security update 5058403. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of uninitialized resource in Windo...

Microsoft Windows Remote Desktop Services 安全漏洞

Microsoft Windows Remote Desktop Services is a collection of features from Microsoft Corporation USA that allow users to remotely access graphical desktops and Windows applications. A security vulnerability exists in Microsoft Windows Remote Desktop Services. An attacker exploiting this...

Microsoft Windows Remote Desktop Gateway 安全漏洞

Microsoft Windows Remote Desktop Gateway RD Gateway is a role service from Microsoft Corporation USA that allows authorized users to securely access internal network resources over the Internet. A security vulnerability exists in Microsoft Windows Remote Desktop Gateway. An attacker exploiting th...

KB5058383: Windows 10 Version 1607 / Windows Server 2016 Security Update (May 2025)

The remote Windows host is missing security update 5058383. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of uninitialized resource in Windo...

KB5058384: Windows Server version 23H2 Security Update (May 2025)

The remote Windows host is missing security update 5058384. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of uninitialized resource in Windo...

KB5058405: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (May 2025)

The remote Windows host is missing security update 5058405. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of uninitialized resource in Windo...

PT-2025-20947 · Microsoft · Remote Desktop Gateway Service +1

Name of the Vulnerable Software and Affected Versions: Remote Desktop Gateway Service affected versions not specified Description: The issue is related to a use after free condition in the Remote Desktop Gateway Service, allowing an unauthorized attacker to execute code over a network. This enabl...

PT-2025-20970

Name of the Vulnerable Software and Affected Versions: Remote Desktop Gateway Service versions affected versions not specified Description: The issue is a heap-based buffer overflow in the Remote Desktop Gateway Service, allowing an unauthorized attacker to execute code over a network. This enabl...

Microsoft Windows Remote Desktop Gateway 资源管理错误漏洞

Microsoft Windows Remote Desktop Gateway RD Gateway is a role service from Microsoft Corporation USA that allows authorized users to securely access internal network resources over the Internet. A resource management error vulnerability exists in Microsoft Windows Remote Desktop Gateway. An...

Microsoft Windows Remote Desktop Gateway 安全漏洞

Microsoft Windows Remote Desktop Gateway RD Gateway is a role service from Microsoft Corporation USA that allows authorized users to securely access internal network resources over the Internet. A security vulnerability exists in Microsoft Windows Remote Desktop Gateway. The following products an...

PT-2025-20969

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop affected versions not specified Description: The issue is a heap-based buffer overflow in Windows Remote Desktop, allowing an unauthorized attacker to execute code over a network. This enables remote attackers to execut...

KB5058454: Windows Server 2008 R2 Security Update (May 2025)

The remote Windows host is missing security update 5058454. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of uninitialized resource in Windo...

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of Remote Desktop Services RDS for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

Kimsuky Exploits BlueKeep RDP Vulnerability to Breach Systems in South Korea and Japan

Cybersecurity researchers have flagged a new malicious campaign related to the North Korean state-sponsored threat actor known as Kimsuky that exploits a now-patched vulnerability impacting Microsoft Remote Desktop Services to gain initial access. The activity has been named Larva-24005 by the...

Unauthorized Network Access

jupyter-remote-desktop-proxy is vulnerable to unauthorized network access. The vulnerability is due to jupyter-remote-desktop-proxy not properly restricting VNC server access to UNIX sockets when using TigerVNC, allowing the server to be accessible over the network...

CVE-2025-32428

Jupyter Remote Desktop Proxy allows you to run a Linux Desktop on a JupyterHub. jupyter-remote-desktop-proxy was meant to rely on UNIX sockets readable only by the current user since version 3.0.0, but when used with TigerVNC, the VNC server started by jupyter-remote-desktop-proxy were still...

CVE-2025-32428

Jupyter Remote Desktop Proxy allows you to run a Linux Desktop on a JupyterHub. jupyter-remote-desktop-proxy was meant to rely on UNIX sockets readable only by the current user since version 3.0.0, but when used with TigerVNC, the VNC server started by jupyter-remote-desktop-proxy were still...

Remote Desktop client for Windows RCE (March 2025)

The Windows Remote Desktop client for Windows installed on the remote host is missing security updates. It is, therefore, affected by a vulnerability. - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. CVE-2025-26645 Note that Nessus...

CVE-2025-32428 Jupyter Remote Desktop Proxy makes TigerVNC accessible via the network and not just via a UNIX socket as intended

Jupyter Remote Desktop Proxy allows you to run a Linux Desktop on a JupyterHub. jupyter-remote-desktop-proxy was meant to rely on UNIX sockets readable only by the current user since version 3.0.0, but when used with TigerVNC, the VNC server started by jupyter-remote-desktop-proxy were still...