CVE-2024-43455
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk75th percentile - higher than 75% of all known CVEs
Summary
A vulnerability in the Windows Remote Desktop Licensing Service allows attackers to spoof the service. This may lead to unauthorized access to system resources.
Risk Assessment
Organizations may be exposed to unauthorized access and potential data breaches, which could result in serious legal and financial consequences.
Recommendation
It is recommended to update Windows to the latest version and monitor access logs for suspicious activities.
Other vulnerabilities in Windows Remote Desktop Licensing Service
See all- CVE-2024-43454High
Remote code execution vulnerability in Windows Remote Desktop Licensing Service. Allows an attacker to execute code remotely in the context of the service.
- CVE-2024-38258Medium
An information disclosure vulnerability in the Windows Remote Desktop Licensing Service. Technical details are not available in the description.
- CVE-2026-69627Medium
An out-of-bounds read vulnerability in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally.
- CVE-2026-68893High
Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network.
- CVE-2024-43467High
Vulnerability in Windows Remote Desktop Licensing Service allows remote code execution. An attacker can execute arbitrary code on the server.
- CVE-2024-38263High
Vulnerability in Windows Remote Desktop Licensing Service allows remote code execution. An attacker can execute arbitrary code on the server.
- CVE-2024-38260High
Remote code execution vulnerability in Windows Remote Desktop Licensing Service. An attacker could exploit this flaw to execute arbitrary code in the service context.
- CVE-2024-38231Medium
Denial of service vulnerability in Windows Remote Desktop Licensing Service. An attacker could cause the licensing service to crash, preventing use of Remote Desktop services.
Original NVD description (English source)
Windows Remote Desktop Licensing Service Spoofing Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS