CVE-2024-38076: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Published Jul 9, 2024
·Updated
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Affected Software
11 affected componentsFixes available
Microsoft Windows Server 2022, 23H2 Edition
Microsoft Windows Server 2016<10.0.14393.7159
Microsoft Windows Server 2019<10.0.17763.6054
Microsoft Windows Server 2022<10.0.20348.2582
Microsoft Windows Server 2022 23h2<10.0.25398.1009
Microsoft Windows Server 2019
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2016
Remediation
Event History
Jul 9, 2024
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·05:03 PM
Data Sourced
via MITRE·05:03 PM
DescriptionSeverity
Jul 10, 2024
News Published
via The Register·12:59 AM
News Published
via The Register·01:02 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-38076?
CVE-2024-38076 is rated as a critical vulnerability due to its remote code execution capabilities.
2
How do I fix CVE-2024-38076?
To fix CVE-2024-38076, apply the relevant security patches provided by Microsoft for your affected Windows Server version.
3
Which Windows Server versions are affected by CVE-2024-38076?
CVE-2024-38076 affects Windows Server 2016, 2019, and 2022, including their Server Core installations.
4
What impact does CVE-2024-38076 have?
CVE-2024-38076 can allow an attacker to execute arbitrary code on the server, leading to potential full system compromise.
5
Is there a workaround for CVE-2024-38076 while waiting for a patch?
Currently, there is no known workaround for CVE-2024-38076, so applying the patch is essential for protection.