{
  "cveId": "CVE-2019-0708",
  "url": "https://patchblox.com/security/cve/CVE-2019-0708",
  "summary": "CVE-2019-0708 is fixed in 10 products on 1 platform, first by KB4499175, released May 14, 2019. It is being exploited: CISA added it to the Known Exploited Vulnerabilities catalog on November 3, 2021, with known ransomware use. Patch Radar priority: Patch now.",
  "title": "Remote Desktop Services\u00A0Remote Code Execution Vulnerability",
  "description": "\u003Cp\u003EA remote code execution vulnerability exists in Remote Desktop Services \u2013 formerly known as Terminal Services \u2013 when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\u003C/p\u003E\n\u003Cp\u003ETo exploit this vulnerability, an attacker would need to send a specially crafted request to the target systems Remote Desktop Service via RDP.\u003C/p\u003E\n\u003Cp\u003EThe update addresses the vulnerability by correcting how Remote Desktop Services handles connection requests.\u003C/p\u003E",
  "published": "2019-05-14T07:00:00Z",
  "severity": "Critical",
  "cvss": 9.8,
  "epss": 0.99999,
  "epssPercentile": 0.99999,
  "priority": "Patch now",
  "priorityTier": 1,
  "exploited": true,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "N/A",
  "kev": {
    "added": "2021-11-03T00:00:00Z",
    "due": "2022-05-03T00:00:00Z",
    "ransomware": true,
    "requiredAction": "Apply updates per vendor instructions."
  },
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0708",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Windows 7 for 32-bit Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4499175",
      "url": "https://patchblox.com/security/fix/microsoft/kb4499175",
      "released": "2019-05-14T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 7 for 32-bit Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4499164",
      "url": "https://patchblox.com/security/fix/microsoft/kb4499164",
      "released": "2019-05-14T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 7 for x64-based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4499175",
      "url": "https://patchblox.com/security/fix/microsoft/kb4499175",
      "released": "2019-05-14T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 7 for x64-based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4499164",
      "url": "https://patchblox.com/security/fix/microsoft/kb4499164",
      "released": "2019-05-14T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4499175",
      "url": "https://patchblox.com/security/fix/microsoft/kb4499175",
      "released": "2019-05-14T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4499164",
      "url": "https://patchblox.com/security/fix/microsoft/kb4499164",
      "released": "2019-05-14T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4499175",
      "url": "https://patchblox.com/security/fix/microsoft/kb4499175",
      "released": "2019-05-14T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4499164",
      "url": "https://patchblox.com/security/fix/microsoft/kb4499164",
      "released": "2019-05-14T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB4499175",
      "url": "https://patchblox.com/security/fix/microsoft/kb4499175",
      "released": "2019-05-14T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB4499164",
      "url": "https://patchblox.com/security/fix/microsoft/kb4499164",
      "released": "2019-05-14T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for 32-bit Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB4499149",
      "url": "https://patchblox.com/security/fix/microsoft/kb4499149",
      "released": "2019-05-14T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for 32-bit Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB4499180",
      "url": "https://patchblox.com/security/fix/microsoft/kb4499180",
      "released": "2019-05-14T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB4499149",
      "url": "https://patchblox.com/security/fix/microsoft/kb4499149",
      "released": "2019-05-14T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB4499180",
      "url": "https://patchblox.com/security/fix/microsoft/kb4499180",
      "released": "2019-05-14T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for Itanium-Based Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB4499149",
      "url": "https://patchblox.com/security/fix/microsoft/kb4499149",
      "released": "2019-05-14T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for Itanium-Based Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB4499180",
      "url": "https://patchblox.com/security/fix/microsoft/kb4499180",
      "released": "2019-05-14T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for x64-based Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB4499149",
      "url": "https://patchblox.com/security/fix/microsoft/kb4499149",
      "released": "2019-05-14T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for x64-based Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB4499180",
      "url": "https://patchblox.com/security/fix/microsoft/kb4499180",
      "released": "2019-05-14T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB4499149",
      "url": "https://patchblox.com/security/fix/microsoft/kb4499149",
      "released": "2019-05-14T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB4499180",
      "url": "https://patchblox.com/security/fix/microsoft/kb4499180",
      "released": "2019-05-14T07:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}