CVE-2020-0609

A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka ‘Windows Remote Desktop Gateway RD Gateway Remote Code Execution Vulnerability’. This CVE ID...

PT-2020-1299

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Gateway RD Gateway affected versions not specified Description A remote code execution issue exists in Windows Remote Desktop Gateway RD Gateway due to insufficient input validation. This allows an unauthenticated attack...

CVE-2019-1489

An information disclosure vulnerability exists when the Windows Remote Desktop Protocol RDP fails to properly handle objects in memory, aka 'Remote Desktop Protocol Information Disclosure Vulnerability'...

CVE-2019-1326

A denial of service vulnerability exists in Remote Desktop Protocol RDP when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Protocol RDP Denial of Service Vulnerability'...

CVE-2019-1333

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'...

CVE-2019-1333

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'...

Remote Desktop Client Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who successfully exploited this vulnerability could execute arbitrary code on the computer of the connecting client. An attacker could then install programs;...

The vulnerability of the Remote Desktop Client on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Remote Desktop Client on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2019-0787

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0788, CVE-2019-1290, CVE-2019-1291...

CVE-2019-0788

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787, CVE-2019-1290, CVE-2019-1291...

CVE-2019-0788

Technical details for CVE-2019-0788 are not provided in the supplied documents. The connected MS blog discusses general endpoint network mitigations and related RDP issues but does not specify affected components, versions, root cause, or fixes for this CVE. Monitor for updates.

Microsoft Patch Tuesday — Sept. 2019: Vulnerability disclosures and Snort coverage

By Jon Munshaw. Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday covers 85 vulnerabilities, 19 of which are rated “critical," 65 that are considered "important" and one "moderate." There is also a...

CVE-2019-1225

An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the system. To exploit this vulnerability, an attacker would have to...

PT-2019-6136 · Microsoft · Windows Remote Desktop Services +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Remote Desktop Services affected versions not specified Description: The issue is caused by errors in checking requests to the Remote Desktop Services RDS when connecting via the RDP protocol. Exploitation of this issue may...

PT-2019-2994 · Microsoft · Windows Rdp Server +1

Name of the Vulnerable Software and Affected Versions: Windows RDP server affected versions not specified Description: An information disclosure issue exists due to the improper disclosure of the Windows RDP server's memory contents. This could allow an attacker to obtain information that could b...

PT-2019-2995 · Microsoft · Windows Rdp Server +1

Name of the Vulnerable Software and Affected Versions: Windows RDP server affected versions not specified Description: An information disclosure issue exists due to the improper disclosure of the Windows RDP server's memory contents. This could allow an attacker to obtain information that could b...

Microsoft Windows Remote Desktop - (BlueKeep) Denial of Service Exploit

Exploit Title: Bluekeep Denial of Service metasploit module Shodan Dork: port:3389 Date: 07/14/2019 Exploit Author: RAMELLA Sebastien https://github.com/mekhalleh/ Vendor Homepage: https://microsoft.com Version: all affected RDP services by cve-2019-0708 Tested on: Windows XP 32-bits / Windows 7...

Exploit for Use After Free in Microsoft

CVE-2019-0708 Unauthenticated CVE-2019-0708 "BlueKeep" DoS PoC...

Windows Remote Desktop (RDP) Use-after-free vulnerablility, "Bluekeep"

A bug in Windows Remote Desktop protocol allows unauthenticated users to run arbitrary code via a specially crafted request to the service. This affects Windows 7/Windows Server 2008 and earlier releases. Given the ubiquity of RDP in corporate environments and the trusted nature of RDP, this coul...