Windows Remote Desktop Services Remote Code Execution Vulnerability

CVE-2024-49120

Summary

A remote code execution vulnerability exists in Microsoft Windows Remote Desktop Services. An attacker who successfully exploits this vulnerability could execute arbitrary code on the target system. Successful exploitation allows the attacker to install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability can be exploited if the attacker has access to the Remote Desktop Protocol (RDP) service and can run code on the targeted computer, underscoring the importance of securing RDP connections and applying security updates.

References