High MSRC-CVE-2025-50171 1 CVE

Remote Desktop Spoofing Vulnerability

Published Aug 12, 2025 · Updated Aug 12, 2025

Vendor: Microsoft

Summary

Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Security updates
10.0.20348.4052 — https://support.microsoft.com/help/5063880
10.0.20348.3989 — https://support.microsoft.com/help/5063812
10.0.19044.6216 — https://support.microsoft.com/help/5063709
10.0.22621.5768 — https://support.microsoft.com/help/5063875
10.0.26100.4946 — https://support.microsoft.com/help/5063878
10.0.26100.4851 — https://support.microsoft.com/help/5064010
10.0.25398.1791 — https://support.microsoft.com/help/5063899

Vulnerabilities 1

Critical 9.1

CVE-2025-50171

Remote Desktop Spoofing Vulnerability

Missing authorization in Remote Desktop Server allows an unauthorized attacker to perform spoofing over a network.

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Aug 12, 2025

Revision history

2025-08-12 #1
Information published.

References

CVE-2025-50171 Remote Desktop Spoofing Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50171
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss