First published: Wed Sep 11 2019(Updated: )
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787, CVE-2019-1290, CVE-2019-1291.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows 10 | ||
Microsoft Windows 10 | =1607 | |
Microsoft Windows 10 | =1703 | |
Microsoft Windows 10 | =1709 | |
Microsoft Windows 10 | =1803 | |
Microsoft Windows 10 | =1809 | |
Microsoft Windows 10 | =1903 | |
Microsoft Windows 8.1 | ||
Microsoft Windows RT |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-0788 has a critical severity rating due to its potential for remote code execution.
To fix CVE-2019-0788, apply the security updates provided by Microsoft for the affected versions of Windows.
CVE-2019-0788 affects multiple versions of Windows including Windows 10 and Windows 8.1.
The impact of CVE-2019-0788 allows an attacker to execute arbitrary code on a vulnerable system by using a malicious Remote Desktop server.
While there are no official workarounds, avoiding untrusted remote desktops can help mitigate the risk of CVE-2019-0788.