Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2024-49120

Windows Remote Desktop Services Remote Code Execution Vulnerability

Description

Windows Remote Desktop Services Remote Code Execution Vulnerability

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows Server 2012

  • 6.2.9200.0 to < 6.2.9200.25222affected

Microsoft Windows Server 2012 (Server Core installation)

  • 6.2.9200.0 to < 6.2.9200.25222affected

Microsoft Windows Server 2012 R2

  • 6.3.9600.0 to < 6.3.9600.22371affected

Microsoft Windows Server 2012 R2 (Server Core installation)

  • 6.3.9600.0 to < 6.3.9600.22371affected

Microsoft Windows Server 2016

  • 10.0.14393.0 to < 10.0.14393.7699affected

Microsoft Windows Server 2016 (Server Core installation)

  • 10.0.14393.0 to < 10.0.14393.7699affected

Microsoft Windows Server 2019

  • 10.0.17763.0 to < 10.0.17763.6775affected

Microsoft Windows Server 2019 (Server Core installation)

  • 10.0.17763.0 to < 10.0.17763.6775affected

Microsoft Windows Server 2022

  • 10.0.20348.0 to < 10.0.20348.3091affected

Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)

  • 10.0.25398.0 to < 10.0.25398.1369affected

Microsoft Windows Server 2025

  • 10.0.26100.0 to < 10.0.26100.2894affected

Microsoft Windows Server 2025 (Server Core installation)

  • 10.0.26100.0 to < 10.0.26100.2894affected

References