CVE-2019-0708β€”Microsoft Remote Desktop Services Remote Code Execution Vulnerability

PUBLISHEDvulnerability record
2021-11-03 Β· last modified July 19, 2025

Metadata

CVE ID:
CVE-2019-0708
Project:
Microsoft
Product:
Remote Desktop Services
Date Added:
2021-11-03
Due Date:
2022-05-03
Last Updated:
July 19, 2025

Vulnerability Name

Microsoft Remote Desktop Services Remote Code Execution Vulnerability

Description

Microsoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulnerability that allows an unauthenticated attacker to connect to the target system using RDP and send specially crafted requests. Successful exploitation allows for remote code execution. The vulnerability is also known under the moniker of BlueKeep.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

  • https://nvd.nist.gov/vuln/detail/CVE-2019-0708

Related News Articles

Related Weaknesses

browse all CVEs