Microsoft Windows Remote Desktop Services Use-After-Free Vulnerability Allowing Remote Code Execution

A use-after-free vulnerability has been identified in Windows Remote Desktop Services. This issue allows an unauthorized attacker to execute code remotely over a network. The vulnerability arises from a race condition that creates a use-after-free scenario, which can be exploited to execute arbitrary code on the affected system.

Impact

Exploitation of this vulnerability could lead to unauthorized remote code execution on the affected system.

Reproduction

To reproduce this vulnerability, connect to a system with the Remote Desktop Gateway role. The exploitation involves triggering the race condition that creates the use-after-free scenario, which can then be leveraged to execute arbitrary code.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates can be downloaded via the Microsoft Update Catalog.