Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2024-49132: Windows Remote Desktop Services allows remote code execution

CVE-2024-49132 · published 1 year ago

Summary

A vulnerability in Windows Remote Desktop Services may allow an attacker to execute malicious code on a computer, potentially gaining control of the system. This could happen if an attacker sends a specially crafted request to a Remote Desktop server. To protect your system, make sure to install the latest updates from Microsoft.

What to do

Update microsoft windows_10_1809 to version 10.0.17763.6659 or later.
Update microsoft windows_10_21h2 to version 10.0.19044.5247 or later.
Update microsoft windows_10_22h2 to version 10.0.19045.5247 or later.
Update microsoft windows_11_22h2 to version 10.0.22621.4602 or later.
Update microsoft windows_11_23h2 to version 10.0.22631.4602 or later.
Update microsoft windows_11_24h2 to version 10.0.26100.2605 or later.
Update microsoft windows_server_2019 to version 10.0.17763.6659 or later.
Update microsoft windows_server_2022 to version 10.0.20348.2966 or later.
Update microsoft windows_server_2022_23h2 to version 10.0.25398.1308 or later.
Update microsoft windows_server_2025 to version 10.0.26100.2605 or later.

Affected software

Vendor	Product	Affected versions
microsoft	windows_10_1809	< 10.0.17763.6659 `cpe:2.3:o:microsoft:windows_10_1809:::::::x64:*`
microsoft	windows_10_21h2	< 10.0.19044.5247 `cpe:2.3:o:microsoft:windows_10_21h2::::::::`
microsoft	windows_10_22h2	< 10.0.19045.5247 `cpe:2.3:o:microsoft:windows_10_22h2::::::::`
microsoft	windows_11_22h2	< 10.0.22621.4602 `cpe:2.3:o:microsoft:windows_11_22h2::::::::`
microsoft	windows_11_23h2	< 10.0.22631.4602 `cpe:2.3:o:microsoft:windows_11_23h2::::::::`
microsoft	windows_11_24h2	< 10.0.26100.2605 `cpe:2.3:o:microsoft:windows_11_24h2::::::::`
microsoft	windows_server_2019	< 10.0.17763.6659 `cpe:2.3:o:microsoft:windows_server_2019::::::::`
microsoft	windows_server_2022	< 10.0.20348.2966 `cpe:2.3:o:microsoft:windows_server_2022::::::::`
microsoft	windows_server_2022_23h2	< 10.0.25398.1308 `cpe:2.3:o:microsoft:windows_server_2022_23h2::::::::`
microsoft	windows_server_2025	< 10.0.26100.2605 `cpe:2.3:o:microsoft:windows_server_2025::::::::`

Original advisory text

Windows Remote Desktop Services Remote Code Execution Vulnerability

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49132 Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

8.1 High

Exploitation

1% chance of attack within 30 days

Type

CWE-416Use After Free

CWE-591Sensitive Data Storage in Improperly Locked Memory

CWE-362Race Condition

Timeline

Published12 Dec 2024

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2024-49132 · NVD

Track software like this

Free during beta