vulnerability
Microsoft Windows: CVE-2025-24045: Windows Remote Desktop Services Remote Code Execution Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:M/Au:N/C:C/I:C/A:C) | Mar 11, 2025 | Mar 11, 2025 | Sep 16, 2025 |
Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
Mar 11, 2025
Added
Mar 11, 2025
Modified
Sep 16, 2025
Description
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
Solutions
microsoft-windows-windows_server_2012-kb5053886microsoft-windows-windows_server_2012_r2-kb5053887microsoft-windows-windows_server_2016-1607-kb5053594microsoft-windows-windows_server_2019-1809-kb5053596microsoft-windows-windows_server_2022-21h2-kb5053603microsoft-windows-windows_server_2022-22h2-kb5053603microsoft-windows-windows_server_2022-23h2-kb5053599microsoft-windows-windows_server_2025-24h2-kb5053598
References
- CVE-2025-24045
- https://attackerkb.com/topics/CVE-2025-24045
- CWE-591
- URL-https://support.microsoft.com/help/5053594
- URL-https://support.microsoft.com/help/5053596
- URL-https://support.microsoft.com/help/5053598
- URL-https://support.microsoft.com/help/5053599
- URL-https://support.microsoft.com/help/5053603
- URL-https://support.microsoft.com/help/5053886
- URL-https://support.microsoft.com/help/5053887
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.