vulnerability
Microsoft Windows: CVE-2025-27482: Windows Remote Desktop Services Remote Code Execution Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:M/Au:N/C:C/I:C/A:C) | Apr 8, 2025 | Apr 8, 2025 | Sep 9, 2025 |
Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
Apr 8, 2025
Added
Apr 8, 2025
Modified
Sep 9, 2025
Description
Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
Solutions
microsoft-windows-windows_server_2016-1607-kb5055521microsoft-windows-windows_server_2019-1809-kb5055519microsoft-windows-windows_server_2022-21h2-kb5055526microsoft-windows-windows_server_2022-22h2-kb5055526microsoft-windows-windows_server_2022-23h2-kb5055527microsoft-windows-windows_server_2025-24h2-kb5055523
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.