Remote Code Execution Vulnerability in Windows Remote Desktop Services by Microsoft
CVE-2025-24035
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 11 March 2025
Badges
What is CVE-2025-24035?
A vulnerability in Windows Remote Desktop Services involves improper locking of memory used for sensitive data storage. This flaw enables attackers to execute arbitrary code remotely, potentially compromising the confidentiality and integrity of sensitive information across a network. It is crucial for organizations to address this vulnerability to safeguard their systems from unauthorized access and data breaches.
Affected Version(s)
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.20947
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.7876
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.7009
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.