Microsoft RDP Client Info Disclosure CVE-2023-28267
CVE-2023-28267 Published on April 11, 2023

Remote Desktop Protocol Client Information Disclosure Vulnerability
Remote Desktop Protocol Client Information Disclosure Vulnerability

Vendor Advisory NVD

Weakness Type

Buffer Over-read

The software reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer. This typically occurs when the pointer or its index is incremented to a position beyond the bounds of the buffer or when pointer arithmetic results in a position outside of the valid memory location to name a few. This may result in exposure of sensitive information or possibly a crash.

Products Associated with CVE-2023-28267

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2023-28267 are published in these products:

Microsoft Windows Server 2012

Microsoft Windows Server 2016

Microsoft Windows Server 2008

Microsoft Windows Server 2019

Microsoft Windows Server 2022

Microsoft Windows 10

Microsoft Windows 11

Microsoft Windows 10 1507

Microsoft Remote Desktop

Microsoft Remote Desktop Client

Affected Versions

Microsoft Windows 10 Version 1809:

Version 10.0.17763.0 and below 10.0.17763.4252 is affected.

Microsoft Windows 10 Version 1809:

Version 10.0.0 and below 10.0.17763.4252 is affected.

Microsoft Windows Server 2019:

Version 10.0.17763.0 and below 10.0.17763.4252 is affected.

Microsoft Windows Server 2019 (Server Core installation):

Version 10.0.17763.0 and below 10.0.17763.4252 is affected.

Microsoft Remote Desktop client for Windows Desktop:

Version 1.2.0.0 and below 1.2.4157.0 is affected.

Microsoft Windows Server 2022:

Version 10.0.20348.0 and below 10.0.20348.1668 is affected.

Microsoft Windows 10 Version 20H2:

Version 10.0.0 and below 10.0.19042.2846 is affected.

Microsoft Windows 11 version 21H2:

Version 10.0.0 and below 10.0.22000.1817 is affected.

Microsoft Windows 10 Version 21H2:

Version 10.0.19043.0 and below 10.0.19044.2846 is affected.

Microsoft Windows 11 version 22H2:

Version 10.0.22621.0 and below 10.0.22621.1555 is affected.

Microsoft Windows 10 Version 22H2:

Version 10.0.19045.0 and below 10.0.19045.2846 is affected.

Microsoft Windows 10 Version 1507:

Version 10.0.10240.0 and below 10.0.10240.19869 is affected.

Microsoft Windows 10 Version 1607:

Version 10.0.14393.0 and below 10.0.14393.5850 is affected.

Microsoft Windows Server 2016:

Version 10.0.14393.0 and below 10.0.14393.5850 is affected.

Microsoft Windows Server 2016 (Server Core installation):

Version 10.0.14393.0 and below 10.0.14393.5850 is affected.

Microsoft Windows Server 2008 R2 Service Pack 1:

Version 6.1.7601.0 and below 6.1.7601.26466 is affected.

Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation):

Version 6.1.7601.0 and below 6.1.7601.26466 is affected.

Microsoft Windows Server 2012:

Version 6.2.9200.0 and below 6.2.9200.24216 is affected.

Microsoft Windows Server 2012 (Server Core installation):

Version 6.2.9200.0 and below 6.2.9200.24216 is affected.

Microsoft Windows Server 2012 R2:

Version 6.3.9600.0 and below 6.3.9600.20919 is affected.

Microsoft Windows Server 2012 R2 (Server Core installation):

Version 6.3.9600.0 and below 6.3.9600.20919 is affected.

Exploit Probability

EPSS

0.93%

Percentile

75.73%