vulnerability

Microsoft Windows: CVE-2025-50171: Remote Desktop Spoofing Vulnerability

Severity
9
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:N)
Published
Aug 12, 2025
Added
Aug 12, 2025
Modified
Sep 17, 2025

Description

Missing authorization in Remote Desktop Server allows an unauthorized attacker to perform spoofing over a network.

Solutions

microsoft-windows-windows_10-21h2-kb5063709microsoft-windows-windows_10-22h2-kb5063709microsoft-windows-windows_11-22h2-kb5063875microsoft-windows-windows_11-23h2-kb5063875microsoft-windows-windows_11-24h2-kb5063878microsoft-windows-windows_server_2022-21h2-kb5063880microsoft-windows-windows_server_2022-22h2-kb5063880microsoft-windows-windows_server_2022-23h2-kb5063899microsoft-windows-windows_server_2025-24h2-kb5063878
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.