CVE-2023-35332
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
A vulnerability in the Windows Remote Desktop Protocol allows for a security feature bypass. An attacker can exploit this flaw to gain unauthorized access to the system.
Risk Assessment
Organizations may be exposed to unauthorized access to their systems, potentially leading to data loss or system compromise.
Recommendation
It is recommended to update operating systems to the latest versions and to monitor access to remote desktop.
Other vulnerabilities in Windows Remote Desktop Protocol
See all- CVE-2026-70587High
Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
- CVE-2026-50497Medium
Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
- CVE-2021-41371Medium
Information Disclosure vulnerability in Windows Remote Desktop Protocol (RDP). Could allow an attacker to gain unauthorized access to data.
Original NVD description (English source)
Windows Remote Desktop Protocol Security Feature Bypass
Vulnerability data from NVD (NIST) · CISA KEV · EPSS