← Database

CVE-2025-24045

HIGH CVSS: 8.1 Published: 2025-03-11 Modified: 2026-06-17

Description

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

Affected Platforms

Microsoft Windows Server 2016Microsoft Windows Server 2019Microsoft Windows Server 2022Microsoft Windows Server 2012Microsoft Windows Server 2025Microsoft Windows Server 2022 23H2

Weakness Type

CWE-591

References