RDP vulnerabilities
Showing 51 - 100 of 165 CVEs
- CVE-2025-27487 Published Apr 8, 2025
Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.
- CVE-2025-26645 Published Mar 11, 2025
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2025-24045 Published Mar 11, 2025
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
- CVE-2025-24035 Published Mar 11, 2025
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
- CVE-2025-21297 Published Jan 14, 2025
Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2024-49120 Published Dec 12, 2024
Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2024-49119 Published Dec 12, 2024
Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2024-49105 Published Dec 12, 2024
Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2024-49075 Published Dec 12, 2024
Windows Remote Desktop Services Denial of Service Vulnerability
- CVE-2024-43599 Published Oct 8, 2024
Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2024-43582 Published Oct 8, 2024
Remote Desktop Protocol Server Remote Code Execution Vulnerability
- CVE-2024-43533 Published Oct 8, 2024
Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2024-38260 Published Sep 10, 2024
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- CVE-2024-39917 Published Jul 12, 2024
xrdp is an open source RDP server. xrdp versions prior to 0.10.0 have a vulnerability that allows attackers to make an infinite number of login attempts. The number of max login attempts is supposed to be limited by a configuration parameter `MaxLoginRetry` in `/etc/xrdp/sesman.ini`. However, this mechanism was not effectively working. As a result, xrdp allows an infinite number of login attempts.
- CVE-2024-38077 Published Jul 9, 2024
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- CVE-2024-38076 Published Jul 9, 2024
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- CVE-2024-38015 Published Jul 9, 2024
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
- CVE-2024-21307 Published Jan 9, 2024
Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2023-35352 Published Jul 11, 2023
Windows Remote Desktop Security Feature Bypass Vulnerability
- CVE-2023-29352 Published Jun 14, 2023
Windows Remote Desktop Security Feature Bypass Vulnerability
- CVE-2023-24905 Published May 9, 2023
Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2022-22017 Published May 10, 2022
Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2022-22015 Published May 10, 2022
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- CVE-2022-23285 Published Mar 9, 2022
Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2022-21990 Published Mar 9, 2022
Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2022-21893 Published Jan 11, 2022
Remote Desktop Protocol Remote Code Execution Vulnerability
- CVE-2022-21851 Published Jan 11, 2022
Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2022-21850 Published Jan 11, 2022
Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2021-43233 Published Dec 15, 2021
Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2021-41371 Published Nov 10, 2021
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- CVE-2021-38666 Published Nov 10, 2021
Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2021-38665 Published Nov 10, 2021
Remote Desktop Protocol Client Information Disclosure Vulnerability
- CVE-2021-38631 Published Nov 10, 2021
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- CVE-2021-36958 Published Aug 12, 2021
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
- CVE-2021-34535 Published Aug 12, 2021
Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2021-31186 Published May 11, 2021
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- CVE-2020-16997 Published Nov 11, 2020
Remote Desktop Protocol Server Information Disclosure Vulnerability
- CVE-2020-16927 Published Oct 16, 2020
<p>A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RDP service on the target system to stop responding.</p> <p>To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides Remote Desktop Protocol (RDP) services.</p> <p>The update addresses the vulnerability by correcting how RDP handles connection requests.</p>
- CVE-2020-16896 Published Oct 16, 2020
<p>An information disclosure vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides Remote Desktop Protocol (RDP) services.</p> <p>The update addresses the vulnerability by correcting how RDP handles connection requests.</p>
- CVE-2020-16863 Published Oct 16, 2020
<p>A denial of service vulnerability exists in Windows Remote Desktop Service when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the Remote Desktop Service on the target system to stop responding.</p> <p>To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides Remote Desktop Service.</p> <p>The update addresses the vulnerability by correcting how Remote Desktop Service handles connection requests.</p>
- CVE-2020-1466 Published Aug 17, 2020
A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RD Gateway service on the target system to stop responding. To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides RD Gateway services. The update addresses the vulnerability by correcting how RD Gateway handles connection requests.
- CVE-2020-1374 Published Jul 14, 2020
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.
- CVE-2020-11039 Published May 29, 2020
In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read and written due to integer overflows in length checks. This has been patched in 2.1.0.
- CVE-2020-0734 Published Feb 11, 2020
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0681.
- CVE-2020-0681 Published Feb 11, 2020
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0734.
- CVE-2020-0660 Published Feb 11, 2020
A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability'.
- CVE-2020-0655 Published Feb 11, 2020
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated attacker abuses clipboard redirection, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.
- CVE-2020-0612 Published Jan 14, 2020
A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability'.
- CVE-2020-0611 Published Jan 14, 2020
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.
- CVE-2020-0610 Published Jan 14, 2020
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0609.
Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.
high 8.0
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
high 8.8
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
high 8.1
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
high 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability
high 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability
high 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability
high 8.1
Remote Desktop Client Remote Code Execution Vulnerability
high 8.4
Windows Remote Desktop Services Denial of Service Vulnerability
high 7.5
Remote Desktop Client Remote Code Execution Vulnerability
high 8.8
Remote Desktop Protocol Server Remote Code Execution Vulnerability
high 8.1
Remote Desktop Client Remote Code Execution Vulnerability
high 8.8
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
high 8.8
xrdp is an open source RDP server. xrdp versions prior to 0.10.0 have a vulnerability that allows attackers to make an infinite number of login attempts. The number of max login attempts is supposed to be limited by a configuration parameter `MaxLoginRetry` in `/etc/xrdp/sesman.ini`. However, this mechanism was not effectively working. As a result, xrdp allows an infinite number of login attempts.
high 7.2
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
critical 9.8
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
critical 9.8
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
high 7.5
Remote Desktop Client Remote Code Execution Vulnerability
high 7.5
Windows Remote Desktop Security Feature Bypass Vulnerability
high 7.5
Windows Remote Desktop Security Feature Bypass Vulnerability
medium 6.5
Remote Desktop Client Remote Code Execution Vulnerability
high 7.8
Remote Desktop Client Remote Code Execution Vulnerability
high 8.8
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
medium 6.5
Remote Desktop Client Remote Code Execution Vulnerability
high 8.8
Remote Desktop Client Remote Code Execution Vulnerability
high 8.8
Remote Desktop Protocol Remote Code Execution Vulnerability
high 8.0
Remote Desktop Client Remote Code Execution Vulnerability
high 8.8
Remote Desktop Client Remote Code Execution Vulnerability
high 8.8
Remote Desktop Client Remote Code Execution Vulnerability
high 7.5
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
medium 4.4
Remote Desktop Client Remote Code Execution Vulnerability
high 8.8
Remote Desktop Protocol Client Information Disclosure Vulnerability
high 7.4
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
medium 4.4
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
high 7.8
Remote Desktop Client Remote Code Execution Vulnerability
high 8.8
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
high 7.4
Remote Desktop Protocol Server Information Disclosure Vulnerability
high 7.7
<p>A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RDP service on the target system to stop responding.</p> <p>To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides Remote Desktop Protocol (RDP) services.</p> <p>The update addresses the vulnerability by correcting how RDP handles connection requests.</p>
high 7.5
<p>An information disclosure vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides Remote Desktop Protocol (RDP) services.</p> <p>The update addresses the vulnerability by correcting how RDP handles connection requests.</p>
high 7.5
<p>A denial of service vulnerability exists in Windows Remote Desktop Service when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the Remote Desktop Service on the target system to stop responding.</p> <p>To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides Remote Desktop Service.</p> <p>The update addresses the vulnerability by correcting how Remote Desktop Service handles connection requests.</p>
high 7.5
A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RD Gateway service on the target system to stop responding. To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides RD Gateway services. The update addresses the vulnerability by correcting how RD Gateway handles connection requests.
high 7.8
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.
high 7.5
In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read and written due to integer overflows in length checks. This has been patched in 2.1.0.
high 8.0
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0681.
high 8.8
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0734.
high 7.5
A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability'.
high 7.5
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated attacker abuses clipboard redirection, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.
high 8.0
A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability'.
high 7.5
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.
high 7.5
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0609.
critical 9.8