Microsoft Remote Desktop
Recent Microsoft Remote Desktop Security Advisories
| Advisory | Title | Published |
|---|---|---|
| CVE-2024-43599 | CVE-2024-43599 Remote Desktop Client Remote Code Execution Vulnerability | October 8, 2024 |
| CVE-2024-43582 | CVE-2024-43582 Remote Desktop Protocol Server Remote Code Execution Vulnerability | October 8, 2024 |
| CVE-2024-43456 | CVE-2024-43456 Windows Remote Desktop Services Tampering Vulnerability | October 8, 2024 |
| CVE-2024-38262 | CVE-2024-38262 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability | October 8, 2024 |
| CVE-2024-43533 | CVE-2024-43533 Remote Desktop Client Remote Code Execution Vulnerability | October 8, 2024 |
| CVE-2024-43455 | CVE-2024-43455 Windows Remote Desktop Licensing Service Spoofing Vulnerability | September 10, 2024 |
| CVE-2024-43454 | CVE-2024-43454 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability | September 10, 2024 |
| CVE-2024-38263 | CVE-2024-38263 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability | September 10, 2024 |
| CVE-2024-38260 | CVE-2024-38260 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability | September 10, 2024 |
| CVE-2024-38258 | CVE-2024-38258 Windows Remote Desktop Licensing Service Information Disclosure Vulnerability | September 10, 2024 |
By the Year
In 2024 there have been 1 vulnerability in Microsoft Remote Desktop with an average score of 8.8 out of ten. Last year Remote Desktop had 4 security vulnerabilities published. Right now, Remote Desktop is on track to have less security vulnerabilities in 2024 than it did last year. However, the average CVE base score of the vulnerabilities in 2024 is greater by 2.03.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2024 | 1 | 8.80 |
| 2023 | 4 | 6.78 |
| 2022 | 5 | 7.00 |
| 2021 | 3 | 8.33 |
| 2020 | 1 | 7.80 |
| 2019 | 1 | 8.00 |
| 2018 | 0 | 0.00 |
It may take a day or so for new Remote Desktop vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Microsoft Remote Desktop Security Vulnerabilities
Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
CVE-2024-38131
8.8 - High
- August 13, 2024
Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
Sensitive Data Storage in Improperly Locked Memory
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2023-29362
8.8 - High
- June 14, 2023
Remote Desktop Client Remote Code Execution Vulnerability
Windows Remote Desktop Security Feature Bypass Vulnerability
CVE-2023-29352
6.5 - Medium
- June 14, 2023
Windows Remote Desktop Security Feature Bypass Vulnerability
Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability
CVE-2023-28290
5.3 - Medium
- May 09, 2023
Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability
Remote Desktop Protocol Client Information Disclosure Vulnerability
CVE-2023-28267
6.5 - Medium
- April 11, 2023
Remote Desktop Protocol Client Information Disclosure Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2022-41121
7.8 - High
- December 13, 2022
Windows Graphics Component Elevation of Privilege Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2022-22017
8.8 - High
- May 10, 2022
Remote Desktop Client Remote Code Execution Vulnerability
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
CVE-2022-22015
6.5 - Medium
- May 10, 2022
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Remote Desktop Protocol Client Information Disclosure Vulnerability
CVE-2022-26940
6.5 - Medium
- May 10, 2022
Remote Desktop Protocol Client Information Disclosure Vulnerability
Remote Desktop Protocol Client Information Disclosure Vulnerability
CVE-2022-24503
5.4 - Medium
- March 09, 2022
Remote Desktop Protocol Client Information Disclosure Vulnerability
Remote Desktop Protocol Client Information Disclosure Vulnerability
CVE-2021-38665
7.4 - High
- November 10, 2021
Remote Desktop Protocol Client Information Disclosure Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2021-34535
8.8 - High
- August 12, 2021
Remote Desktop Client Remote Code Execution Vulnerability
Windows Remote Desktop Security Feature Bypass Vulnerability
CVE-2021-1669
8.8 - High
- January 12, 2021
Windows Remote Desktop Security Feature Bypass Vulnerability
An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it
CVE-2020-0919
7.8 - High
- April 15, 2020
An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load unsigned binaries, aka 'Microsoft Remote Desktop App for Mac Elevation of Privilege Vulnerability'.
Improper Privilege Management
A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an authenticated attacker abuses clipboard redirection
CVE-2019-0887
8 - High
- July 15, 2019
A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an authenticated attacker abuses clipboard redirection, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.
Directory traversal
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Microsoft Windows 11 or by Microsoft? Click the Watch button to subscribe.
