PT-2025-20938

Name of the Vulnerable Software and Affected Versions: Remote Desktop Gateway Service affected versions not specified Description: The issue is related to uncontrolled resource consumption in the Remote Desktop Gateway Service, allowing an unauthorized attacker to deny service over a network. Thi...

KB5058411: Windows 11 Version 24H2 / Windows Server 2025 Security Update (May 2025)

The remote Windows host is missing security update 5058411 or Hot Patch 5058497. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of...

KB5058379: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (May 2025)

The remote Windows host is missing security update 5058379. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of uninitialized resource in Windo...

KB5058451: Windows Server 2012 Security Update (May 2025)

The remote Windows host is missing security update 5058451. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of uninitialized resource in Windo...

KB5058403: Windows Server 2012 R2 Security Update (May 2025)

The remote Windows host is missing security update 5058403. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of uninitialized resource in Windo...

KB5058385: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (May 2025)

The remote Windows host is missing security update 5058385 or Hot Patch 5058500. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of...

Microsoft Windows Remote Desktop Gateway 安全漏洞

Microsoft Windows Remote Desktop Gateway RD Gateway is a role service from Microsoft Corporation USA that allows authorized users to securely access internal network resources over the Internet. A security vulnerability exists in Microsoft Windows Remote Desktop Gateway. An attacker exploiting th...

Microsoft Windows Remote Desktop Services 安全漏洞

Microsoft Windows Remote Desktop Services is a collection of features from Microsoft Corporation USA that allow users to remotely access graphical desktops and Windows applications. A security vulnerability exists in Microsoft Windows Remote Desktop Services. An attacker exploiting this...

KB5058384: Windows Server version 23H2 Security Update (May 2025)

The remote Windows host is missing security update 5058384. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of uninitialized resource in Windo...

KB5058383: Windows 10 Version 1607 / Windows Server 2016 Security Update (May 2025)

The remote Windows host is missing security update 5058383. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of uninitialized resource in Windo...

KB5058405: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (May 2025)

The remote Windows host is missing security update 5058405. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of uninitialized resource in Windo...

PT-2025-20970

Name of the Vulnerable Software and Affected Versions: Remote Desktop Gateway Service versions affected versions not specified Description: The issue is a heap-based buffer overflow in the Remote Desktop Gateway Service, allowing an unauthorized attacker to execute code over a network. This enabl...

Microsoft Windows Remote Desktop Gateway 安全漏洞

Microsoft Windows Remote Desktop Gateway RD Gateway is a role service from Microsoft Corporation USA that allows authorized users to securely access internal network resources over the Internet. A security vulnerability exists in Microsoft Windows Remote Desktop Gateway. The following products an...

Microsoft Windows Remote Desktop Gateway 资源管理错误漏洞

Microsoft Windows Remote Desktop Gateway RD Gateway is a role service from Microsoft Corporation USA that allows authorized users to securely access internal network resources over the Internet. A resource management error vulnerability exists in Microsoft Windows Remote Desktop Gateway. An...

KB5058454: Windows Server 2008 R2 Security Update (May 2025)

The remote Windows host is missing security update 5058454. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of uninitialized resource in Windo...

PT-2025-20947 · Microsoft · Remote Desktop Gateway Service +1

Name of the Vulnerable Software and Affected Versions: Remote Desktop Gateway Service affected versions not specified Description: The issue is related to a use after free condition in the Remote Desktop Gateway Service, allowing an unauthorized attacker to execute code over a network. This enabl...

PT-2025-20969

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop affected versions not specified Description: The issue is a heap-based buffer overflow in Windows Remote Desktop, allowing an unauthorized attacker to execute code over a network. This enables remote attackers to execut...

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of Remote Desktop Services RDS for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

Kimsuky Exploits BlueKeep RDP Vulnerability to Breach Systems in South Korea and Japan

Cybersecurity researchers have flagged a new malicious campaign related to the North Korean state-sponsored threat actor known as Kimsuky that exploits a now-patched vulnerability impacting Microsoft Remote Desktop Services to gain initial access. The activity has been named Larva-24005 by the...

Unauthorized Network Access

jupyter-remote-desktop-proxy is vulnerable to unauthorized network access. The vulnerability is due to jupyter-remote-desktop-proxy not properly restricting VNC server access to UNIX sockets when using TigerVNC, allowing the server to be accessible over the network...