CVE-2019-0708
Microsoft Windows, Microsoft Windows Server
Published 16 May 2019 · updated 17 Jun 2026 · Analyzed
9.8 Critical · CVSS 3.1, NVD
Exploited in the wild
CISA added this to its Known Exploited Vulnerabilities catalog on 3 Nov 2021, with a remediation deadline of 3 May 2022 for US federal agencies. It has been used in ransomware campaigns.
Required action: Apply updates per vendor instructions.
Description
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.
References
- packetstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.html · Exploit, Third Party Advisory, VDB Entry
- packetstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.html · Exploit, Third Party Advisory, VDB Entry
- packetstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.html · Exploit, Third Party Advisory, VDB Entry
- packetstormsecurity.com/files/155389/Microsoft-Windows-7-x86-BlueKeep-RDP-Use-After-Free.html · Third Party Advisory, VDB Entry
- packetstormsecurity.com/files/162960/Microsoft-RDP-Remote-Code-Execution.html · Exploit, Third Party Advisory, VDB Entry
- www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-windows-en · Third Party Advisory
- www.huawei.com/en/psirt/security-notices/huawei-sn-20190515-01-windows-en · Third Party Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-166360.pdf · Third Party Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-406175.pdf · Third Party Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-433987.pdf · Third Party Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-616199.pdf · Third Party Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-832947.pdf · Third Party Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-932041.pdf · Third Party Advisory
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708 · Patch, Vendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0708 · US Government Resource