Skip to content
fr Sign in
9.8 Critical Exploited · ransomware BlueKeep

CVE-2019-0708 Microsoft Remote Desktop Services Remote Code Execution Vulnerability

Active exploitation observed

· CISA KEV catalogue
Required action Apply updates per vendor instructions.
Ransomware campaigns Known to be used
Weakness CWE-416

Description

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

Affected products and versions

Product Affected versions Fixed in
Windows Versions not published
Windows Server Versions not published

References

Timeline

  1. Published
  2. Added to the KEV catalogue
  3. Last modified

Other CVEs of Windows

The 829 CVEs of Windows →
CVE-2025-59033 The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy 7.4 High CVE-2022-50238 The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended… 7.4 High CVE-2025-9491 Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability 7.0 High CVE-2022-40733 An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version… 5.0 Medium
Track this CVE