CVE-2023-29352: Windows Remote Desktop Security Feature Bypass Vulnerability
Published Jun 13, 2023
·Updated
Windows Remote Desktop Security Feature Bypass Vulnerability
Affected Software
28 affected componentsFixes available
Microsoft Remote Desktop client for Windows Desktop
Microsoft Windows Server 2019
Microsoft Windows Server 2019
Microsoft Windows 11=22H2
Microsoft Windows 11=22H2
Microsoft Windows 11=21H2
Microsoft Windows 11=21H2
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Remote Desktop Windows<1.2.4337.0
Microsoft Windows 10 1809<10.0.17763.4499
Microsoft Windows 10 21h2<10.0.19045.3087
Microsoft Windows 10 22h2<10.0.19045.3087
Microsoft Windows 11 21h2<10.0.22000.2057
Microsoft Windows 11 21h2<10.0.22000.2057
Microsoft Windows 11 22h2<10.0.22621.1848
Microsoft Windows 11 22h2<10.0.22621.1848
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows 10=1809
Microsoft Windows 10=22H2
Microsoft Windows 10=21H2
Microsoft Remote Desktop Client Windows<1.2.4337
Microsoft Windows 10 21h2<10.0.19044.3086
Microsoft Windows 11 21h2<10.0.22000.2057
Microsoft Windows 11 22h2<10.0.22621.1848
Microsoft Windows Server 2019<10.0.17763.4499
Microsoft Windows Server 2022<10.0.20348.1787
Remediation
Event History
Jun 13, 2023
CVE Published
07:00 AM
Data Sourced
07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·11:26 PM
Data Sourced
via MITRE·11:26 PM
DescriptionSeverity
Jun 14, 2023
Data Sourced
via NVD·12:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2023-29352?
CVE-2023-29352 is a Windows Remote Desktop Security Feature Bypass Vulnerability.
2
Which software is affected by CVE-2023-29352?
CVE-2023-29352 affects the Microsoft Remote Desktop client for Windows Desktop, Windows 11 (21H2 and 22H2), Windows Server 2022, Windows Server 2019, and Windows 10 (1809, 21H2, and 22H2).
3
What is the severity of CVE-2023-29352?
CVE-2023-29352 has a severity rating of 6.5 (high).
4
How can I fix CVE-2023-29352?
To fix CVE-2023-29352, you should install the appropriate patches and updates provided by Microsoft. Please refer to the vendor's official website for detailed instructions.
5
Where can I find more information about CVE-2023-29352?
You can find more information about CVE-2023-29352 on the Microsoft Security Response Center (MSRC) website at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29352.