Remote Desktop Client Remote Code Execution Vulnerability

CVE-2024-21307

Summary

A vulnerability exists in Microsoft Remote Desktop Client that could allow an authenticated attacker to execute arbitrary code on a remote system. This issue arises from improper validation of user-provided data. Exploitation of this vulnerability requires the attacker to send a specially crafted request, which could lead to unauthorized access or control over the affected system. Users and administrators are advised to apply appropriate security measures and updates from Microsoft to mitigate the risks associated with this vulnerability.

References