Microsoft Windows Remote Desktop Services Code Execution Vulnerability

A remote code execution vulnerability has been identified in Windows Remote Desktop Services. This issue arises from sensitive data being stored in improperly locked memory, which allows an unauthorized attacker to execute code over the network. The vulnerability affects multiple versions of Windows Server and Windows 10, as well as Windows 11.

Impact

Exploitation of this vulnerability could lead to unauthorized remote code execution on the affected system.

Reproduction

To reproduce this vulnerability, an attacker would need to connect to a system with the Remote Desktop Gateway role. By triggering a race condition, it is possible to create a use-after-free scenario that can be exploited to execute arbitrary code.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates are available through the Microsoft Update Catalog.