Remote Code Execution Vulnerability in Windows Remote Desktop Services by Microsoft
CVE-2025-32710
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 10 June 2025
Badges
What is CVE-2025-32710?
A use after free vulnerability in Windows Remote Desktop Services enables unauthorized attackers to execute arbitrary code over a network. This flaw can lead to significant security breaches, allowing malicious parties to gain control over affected systems. Users are urged to apply relevant security updates and patches to mitigate potential risks and protect their systems from exploitation.
Affected Version(s)
Windows Server 2008 Service Pack 2 x64-based Systems 6.0.6003.0 < 6.0.6003.23317
Windows Server 2008 R2 Service Pack 1 (Server Core installation) x64-based Systems 6.1.7601.0 < 6.1.7601.27729
Windows Server 2008 R2 Service Pack 1 x64-based Systems 6.1.7601.0 < 6.1.7601.27729
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.