NetSight
high8.1

CVE-2024-49128

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

Impact

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

Affected products

VendorProductAffected versions
MicrosoftWindows Server 2012
All versions
Version r2
MicrosoftWindows Server 2016
before 10.0.14393.7606
MicrosoftWindows Server 2019
before 10.0.17763.6659
MicrosoftWindows Server 2022
before 10.0.20348.2966
MicrosoftWindows Server 2022 23h2
before 10.0.25398.1308
MicrosoftWindows Server 2025
before 10.0.26100.2605

Weakness classification

References