Microsoft Windows Remote Desktop Services Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Windows Remote Desktop Services. This issue arises from sensitive data being stored in improperly locked memory, which allows an unauthorized attacker to execute code over the network. The vulnerability affects multiple versions of Windows Server, including 2012, 2016, 2019, 2022, and 2025, as well as Windows Server 2022 23H2 Edition.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can apply the security updates provided by Microsoft for this vulnerability. These security updates can be downloaded via the Microsoft Update Catalog or through the Windows Server Update Services (WSUS).