Skip to content
OpenAdvisories
High MSRC-CVE-2025-21330 1 CVE

Windows Remote Desktop Services Denial of Service Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026 · Revision 2

Vendor: Microsoft

Summary

Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of availability (A:H). What does that mean for this vulnerability?
An attacker can send specially crafted packets which could affect availability of the service and result in Denial of Service (DoS).

Security updates
10.0.28000.2269 — https://support.microsoft.com/help/5095051
10.0.17763.6775 — https://support.microsoft.com/help/5050008
10.0.20348.3091 — https://support.microsoft.com/help/5049983
10.0.19044.5371 — https://support.microsoft.com/help/5049981
10.0.22621.4751 — https://support.microsoft.com/help/5050021
10.0.26100.2894 — https://support.microsoft.com/help/5050009
10.0.25398.1369 — https://support.microsoft.com/help/5049984

Vulnerabilities 1

Revision history

  1. #2

    To comprehensively address this vulnerability Windows 11 Version 26H1 for ARM64-based Systems and Windows 11 Version 26H1 for64-based Systems have been added to the Security Updates table. Microsoft recommend updating to the June 2026 version of your Windows operating systems.

  2. #1

    Information published.

References