vulnerability
Microsoft Windows: CVE-2025-30394: Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:N/I:N/A:C) | May 13, 2025 | May 13, 2025 | Sep 16, 2025 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:C)
Published
May 13, 2025
Added
May 13, 2025
Modified
Sep 16, 2025
Description
Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.
Solutions
microsoft-windows-windows_server_2012-kb5058451microsoft-windows-windows_server_2012_r2-kb5058403microsoft-windows-windows_server_2016-1607-kb5058383microsoft-windows-windows_server_2019-1809-kb5058392microsoft-windows-windows_server_2022-21h2-kb5058385microsoft-windows-windows_server_2022-22h2-kb5058385microsoft-windows-windows_server_2022-23h2-kb5058384microsoft-windows-windows_server_2025-24h2-kb5058411
References
- CVE-2025-30394
- https://attackerkb.com/topics/CVE-2025-30394
- CWE-362
- CWE-591
- URL-https://support.microsoft.com/help/5058383
- URL-https://support.microsoft.com/help/5058384
- URL-https://support.microsoft.com/help/5058385
- URL-https://support.microsoft.com/help/5058392
- URL-https://support.microsoft.com/help/5058403
- URL-https://support.microsoft.com/help/5058411
- URL-https://support.microsoft.com/help/5058451
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.