PT-2024-9431 · Microsoft · Windows Remote Desktop Services +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Services affected versions not specified Description: The issue is related to a remote code execution problem in Windows Remote Desktop Services. It involves the use of memory after it has been freed, which can be...

Largest Patch Tuesday since July includes two exploited in the wild, three critical vulnerabilities

The largest Microsoft Patch Tuesday since July includes two vulnerabilities that have been exploited in the wild and three other critical issues across the company's range of hardware and software offerings. October's monthly security update from Microsoft includes fixes for 117 CVEs, the most in...

CVE-2024-43456 Windows Remote Desktop Services Tampering Vulnerability

...

CVE-2024-38262

CVE-2024-38262 is a Windows Remote Desktop Licensing Service Remote Code Execution vulnerability. The CVE entry lists a 3.1.1 CVSSv3.1 base score of 7.5 (High) with network as the attack vector, requiring low privileges and no user interaction, and resulting in high confidentiality, integrity, an...

PT-2024-6757 · Microsoft · Windows Remote Desktop Licensing Service +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Licensing Service affected versions not specified Description: The issue is related to the use of insecure mechanisms for handling authentication data in the operating system's memory. It allows remote attackers to...

CVE-2024-38258

Windows Remote Desktop Licensing Service Information Disclosure Vulnerability...

CVE-2024-38258

Windows Remote Desktop Licensing Service Information Disclosure Vulnerability...

CVE-2024-38240

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability...

CVE-2024-38231

Windows Remote Desktop Licensing Service Denial of Service Vulnerability...

CVE-2024-38260 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

...

EUVD-2024-37225

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability...

CVE-2024-38258 Windows Remote Desktop Licensing Service Information Disclosure Vulnerability

...

Windows Remote Desktop Licensing Service Spoofing Vulnerability

...

PT-2024-6279 · Microsoft · Windows Remote Desktop Licensing Service +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Licensing Service affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the Windows Remote Desktop Licensing Service, which is caused by weaknesses in the authenticati...

PT-2024-6278 · Microsoft · Windows Remote Access Connection Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Access Connection Manager affected versions not specified Description: The issue is related to a memory reading boundary error in the Windows Remote Access Connection Manager. It allows a remote attacker to elevate their...

PT-2024-6239 · Microsoft · Windows Remote Desktop Licensing Service +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Licensing Service affected versions not specified Description: The issue is related to errors in handling relative path to directory in the Remote Desktop Licensing Service of Windows operating systems. Exploitation of...

PT-2024-6256 · Microsoft · Windows Remote Desktop Licensing Service +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Licensing Service affected versions not specified Description: The issue is related to synchronization errors in the Windows Remote Desktop Licensing Service, specifically a "race condition" scenario. This can be...

CVE-2024-38120

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

Microsoft Windows Remote Desktop Licensing Remote Code Execution Vulnerability

Microsoft Windows Remote Desktop Licensing is a remote desktop licensing service that allows users to connect interactively to remote computers. A remote code execution vulnerability exists in Microsoft Windows Remote Desktop Licensing, which is caused by a flaw in the Remote Desktop Licensing...

Largest Patch Tuesday in 3 months includes 5 critical vulnerabilities

Microsoft released its monthly security update on Tuesday, disclosing 142 vulnerabilities across its suite of products and software. Of those, there are five critical vulnerabilities, and every other security issue disclosed this month is considered "important." This is the largest Patch Tuesday...