CVE-2022-22017

CVE-2022-22017 is a Remote Desktop Client RCE vulnerability affecting Windows clients. The attack requires a user to connect to a malicious RDP server; on connection, code can be executed on the victim’s system with the user’s privileges. Public patch guidance is available via Microsoft KBs (KB50...

CVE-2021-34535

CVE-2021-34535 is a Remote Desktop Client remote code execution vulnerability in Windows. According to the connected sources, it affects the Windows Remote Desktop Client component and is rated High (CVSS v3.1 base 8.8). Exploitation was addressed in Microsoft’s August 2021 Patch Tuesday updates;...

CVE-2022-22015

Technical details about CVE-2022-22015 are not provided in the connected documents. The MSKB entries listed pertain to OS/security updates but do not disclose affected RDP components, exploit specifics, or patch details for this CVE. Monitor for updates.

CVE-2022-26940

CVE-2022-26940 is a Remote Desktop Protocol Client Information Disclosure Vulnerability affecting the Microsoft Remote Desktop Client. Public documents confirm the issue pertains to information disclosure within the RDP client component, with linked references to Microsoft’s advisory (KB/MSRC) an...

CVE-2021-1669

CVE-2021-1669 is a Windows Remote Desktop Security Feature Bypass vulnerability. The linked NVD entry notes a high-severity, network-based issue (CVSS v3.1: 8.8; privileges required: LOW; user interaction: NONE; impact: HIGH across confidentiality, integrity, availability). OpenVAS-derived entrie...

CVE-2022-41121

CVE-2022-41121 is a Windows Graphics Component Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.8 (HIGH), requiring LOCAL access with LOW privileges and no user interaction. The available descriptions identify the affected component as Windows Graphics Component but provide n...