CVE-2023-29362: Remote Desktop Client Remote Code Execution Vulnerability
Published Jun 13, 2023
·Updated
Remote Desktop Client Remote Code Execution Vulnerability
Affected Software
45 affected componentsFixes available
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012
Microsoft Remote Desktop client for Windows Desktop
Microsoft Windows Server 2019
Microsoft Windows Server 2019
Microsoft Windows 11=22H2
Microsoft Windows 11=22H2
Microsoft Windows 11=21H2
Microsoft Windows 11=21H2
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Remote Desktop Windows<1.2.4337.0
Microsoft Windows 10 1507<10.0.10240.19983
Microsoft Windows 10 1607<10.0.14393.5989
Microsoft Windows 10 1809<10.0.17763.4499
Microsoft Windows 10 21h2<10.0.19045.3087
Microsoft Windows 10 22h2<10.0.19045.3087
Microsoft Windows 11 21h2<10.0.22000.2057
Microsoft Windows 11 21h2<10.0.22000.2057
Microsoft Windows 11 22h2<10.0.22621.1848
Microsoft Windows 11 22h2<10.0.22621.1848
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2016
Microsoft Windows 10=1809
Microsoft Windows 10=22H2
Microsoft Windows 10=1607
Microsoft Windows 10=21H2
Microsoft Windows 10
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2008 R2
Microsoft Remote Desktop Client Windows<1.2.4337
Microsoft Windows 10 21h2<10.0.14393.5989
Microsoft Windows 11 21h2<10.0.22000.2057
Microsoft Windows 11 22h2<10.0.22621.1848
Microsoft Windows Server 2016<10.0.14393.5989
Microsoft Windows Server 2019<10.0.17763.4499
Microsoft Windows Server 2022<10.0.20348.1787
Remediation
Event History
Jun 13, 2023
CVE Published
07:00 AM
Data Sourced
07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·11:26 PM
Data Sourced
via MITRE·11:26 PM
DescriptionSeverity
Jun 14, 2023
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-29362?
The severity of CVE-2023-29362 is high with a severity value of 8.8.
2
Which products are affected by CVE-2023-29362?
The products affected by CVE-2023-29362 include Microsoft Remote Desktop client for Windows Desktop, Windows Server 2008 R2, Windows Server 2012 R2, Windows Server 2016, Windows 11, Windows Server 2022, Windows 10, and Windows Server 2019.
3
How can I fix CVE-2023-29362 for Microsoft Remote Desktop client for Windows Desktop?
You can fix CVE-2023-29362 for Microsoft Remote Desktop client for Windows Desktop by applying the patch available at <patch-url>.
4
How can I fix CVE-2023-29362 for Windows Server 2008 R2?
You can fix CVE-2023-29362 for Windows Server 2008 R2 by applying the patch available at <patch-url>.
5
How can I fix CVE-2023-29362 for Windows Server 2012 R2?
You can fix CVE-2023-29362 for Windows Server 2012 R2 by applying the patch available at <patch-url>.