Skip to content
OpenAdvisories
Critical MSRC-CVE-2024-49128 1 CVE

Windows Remote Desktop Services Remote Code Execution Vulnerability

Published Dec 10, 2024 · Updated May 13, 2025 · Revision 3

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

How could an attacker exploit this vulnerability?
An attacker could successfully exploit this vulnerability by attempting to connect to a system with the Remote Desktop Gateway role, triggering the race condition to create a use-after-free scenario, and then leveraging this to execute arbitrary code.

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition.

Security updates
10.0.17763.7314 — https://support.microsoft.com/help/5058392
10.0.20348.3692 — https://support.microsoft.com/help/5058385
10.0.20348.3630 — https://support.microsoft.com/help/5058500
10.0.26100.4061 — https://support.microsoft.com/help/5058411
10.0.26100.3981 — https://support.microsoft.com/help/5058497
10.0.25398.1611 — https://support.microsoft.com/help/5058384
10.0.14393.8066 — https://support.microsoft.com/help/5058383
6.2.9200.25475 — https://support.microsoft.com/help/5058451
6.3.9600.22577 — https://support.microsoft.com/help/5058403

Vulnerabilities 1

Revision history

  1. #3

    To comprehensively address CVE-2024-49128, Microsoft has released May 2025 security updates for all affected versions of Windows Server. Microsoft recommends that customers install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.

  2. #2

    Updated acknowledgment. This is an informational change only.

  3. #1

    Information published.

References