Most recent entries from all

bdu:2019-01846

2026-10-02T14:55:58.979820+00:00

bdu:2019-01846

certfr-2019-ale-006 — \[Mise à jour du 22 mai 2019 : Informations complémentaires et situation\] \[Mise à jour du 2…

2026-10-02T14:55:58.979858+00:00
certfr-2019-ale-006

certfr-2019-avi-223 — De multiples vulnérabilités ont été corrigées dans Microsoft Windows. Elles permettent à un…

2026-10-02T14:55:58.979900+00:00
certfr-2019-avi-223

cnvd-2019-14264

2026-10-02T14:55:58.979916+00:00
cnvd-2019-14264

EUVD-2026-256221

2026-10-02T14:55:58.979928+00:00
EUVD-2026-256221

fkie_cve-2019-0708

2026-10-02T14:55:58.979939+00:00

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

GHSA-fq64-gmq7-jjvg

2026-10-02T14:55:58.979967+00:00

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

gsd-2019-0708

2026-10-02T14:55:58.979983+00:00
gsd-2019-0708

ICSMA-20-049-01 — Spacelabs Xhibit Telemetry Receiver (XTR)

2026-10-02T14:55:58.979993+00:00

The affected product is vulnerable to a remote code execution vulnerability that exists in Remote Desktop Services (formerly known as Terminal Services) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would need to send a specially crafted request to the target system 's Remote Desktop Service via RDP.CVE-2019-0708 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

VDE-2019-011 — Pepperl+Fuchs: Remote code execution vulnerability in HMI devices

2026-10-02T14:55:58.980017+00:00

A remote code execution vulnerability exists in **Remote Desktop Services** – formerly known as **Terminal Services** – when an unauthenticated attacker connects to the target system using **RDP** and sends specially crafted requests. This vulnerability is **pre-authentication** and requires **no user interaction**. An attacker who successfully exploits this vulnerability could execute arbitrary code on the target system.

To exploit this vulnerability, an attacker would need to send a specially crafted request to the target system's Remote Desktop Service via **RDP**.

### Microsoft Advisories

- [CVE-2019-0708](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708) - [CVE-2019-1181](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1181) - [CVE-2019-1182](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1182)