← Database

CVE-2024-49128

HIGH CVSS: 8.1 Published: 2024-12-12 Modified: 2026-06-17

Description

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

Affected Platforms

Microsoft Windows Server 2016Microsoft Windows Server 2019Microsoft Windows Server 2022Microsoft Windows Server 2012Microsoft Windows Server 2025Microsoft Windows Server 2022 23H2

Weakness Type

CWE-416, CWE-591, CWE-362

References