CVEvulnerability

CVE-2019-0887

8.0 HIGH Published 2019-07-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-07-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.0 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
8.5 HIGH — AV:N/AC:M/Au:S/C:C/I:C/A:C
Weaknesses
CWE-22

Description

A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an authenticated attacker abuses clipboard redirection, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

Affected configurations

• microsoft remote desktop client (< 1.2.2691) • microsoft windows 10 • microsoft windows 10 1607 • microsoft windows 10 1703 • microsoft windows 10 1709 • microsoft windows 10 1803 • microsoft windows 10 1809 • microsoft windows 10 1903 • microsoft windows 11 21h2 10.0.22000.376 • microsoft windows 7 • microsoft windows 8.1 • microsoft windows rt 8.1 • microsoft windows server 2008 • microsoft windows server 2008 r2 • microsoft windows server 2012 • microsoft windows server 2012 r2 • microsoft windows server 2016 • microsoft windows server 2016 1803 • microsoft windows server 2016 1903 • microsoft windows server 2019

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References