CVE-2024-49128

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49128	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_server_2012:-:::::::*
	cpe:2.3:o:microsoft:windows_server_2012:r2:::::::*
	cpe:2.3:o:microsoft:windows_server_2016::::::::
	cpe:2.3:o:microsoft:windows_server_2019::::::::
	cpe:2.3:o:microsoft:windows_server_2022::::::::
	cpe:2.3:o:microsoft:windows_server_2022_23h2::::::::
	cpe:2.3:o:microsoft:windows_server_2025::::::::

History

13 May 2025, 16:15

Type	Values Removed	Values Added
Summary	~~(en) Windows Remote Desktop Services Remote Code Execution Vulnerability~~	(en) Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

14 Jan 2025, 17:49

Type	Values Removed	Values Added
CWE		CWE-362
References	~~() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49128 -~~	() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49128 - Vendor Advisory
First Time		Microsoft windows Server 2025 Microsoft windows Server 2022 Microsoft windows Server 2012 Microsoft Microsoft windows Server 2016 Microsoft windows Server 2019 Microsoft windows Server 2022 23h2
CPE		cpe:2.3:o:microsoft:windows_server_2012:r2:::::::* cpe:2.3:o:microsoft:windows_server_2022_23h2:::::::: cpe:2.3:o:microsoft:windows_server_2025:::::::: cpe:2.3:o:microsoft:windows_server_2012:-:::::::* cpe:2.3:o:microsoft:windows_server_2019:::::::: cpe:2.3:o:microsoft:windows_server_2022:::::::: cpe:2.3:o:microsoft:windows_server_2016::::::::

12 Dec 2024, 02:04

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-12-12 02:04

Updated : 2025-05-13 16:15

NVD link : CVE-2024-49128

Mitre link : CVE-2024-49128

CVE.ORG link : CVE-2024-49128

JSON object : View

Products Affected

microsoft

windows_server_2016
windows_server_2022_23h2
windows_server_2022
windows_server_2025
windows_server_2019
windows_server_2012

CWE

CWE-416

Use After Free

CWE-591

Sensitive Data Storage in Improperly Locked Memory

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

{"id": "CVE-2024-49128", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "secure@microsoft.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.2}]}, "published": "2024-12-12T02:04:39.870", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49128", "tags": ["Vendor Advisory"], "source": "secure@microsoft.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "secure@microsoft.com", "description": [{"lang": "en", "value": "CWE-416"}, {"lang": "en", "value": "CWE-591"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-362"}]}], "descriptions": [{"lang": "en", "value": "Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network."}, {"lang": "es", "value": "Vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo en los Servicios de Escritorio Remoto de Windows"}], "lastModified": "2025-05-13T16:15:27.703", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "361D1B8E-6E56-4B5F-85D1-D47114A10A81", "versionEndExcluding": "10.0.14393.7606"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11517523-F822-45BC-B347-C65F00B45202", "versionEndExcluding": "10.0.17763.6659"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AECABB2C-DACB-4BBD-8739-DDB00285B0A7", "versionEndExcluding": "10.0.20348.2966"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37977CFB-B259-49B8-B0C5-85ECB40FE429", "versionEndExcluding": "10.0.25398.1308"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E013EA3C-6F18-4CA4-AF5B-664F869B9A6D", "versionEndExcluding": "10.0.26100.2605"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com"}

8.1 /10