CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-05-16
Windows Remote Desktop Services RDP Remote Code Execution Vulnerability (BlueKeep - CVE-2019-0708) Security Advisory
[Affected Scope] Legacy Windows operating systems including Windows XP, Windows 7, Windows Server 2003, Windows Server 2008, and 2008 R2
[Impact] An unauthenticated remote attacker can execute arbitrary code with kernel-level privileges or trigger a system crash (DoS) by sending specially crafted RDP requests, enabling wormable self-propagation across networks
[Mitigation] Immediately apply the official Microsoft security patches, or disable RDP services and enable Network Level Authentication (NLA) if patching is not feasible