CVE-2022-24503

—

CVSS 3.1

5.4 medium

EPSS

2%p83

Published

Mar 9, 2022 (Mar 9, 2022)

Modified

Jun 17, 2026

Description

Remote Desktop Protocol Client Information Disclosure Vulnerability

Vendors: microsoft
Products: remote desktop client, windows 10, windows 11, windows 7, windows 8.1, windows rt 8.1, windows server, windows server 2008, windows server 2012, windows server 2016, windows server 2019, windows server 2022
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news2 stories

Microsoft Patch Tuesday, March 2022 Edition

Krebs on SecurityMar 9, 16:52 UTC · Mar 9, 2022Vulnerability CVE-2022-24512 CVE-2022-21990 CVE-2022-24459+5 CVEs

60

Microsoft Fixes 71 Bugs Including Three Zero Days

Infosecurity MagazineMar 9, 09:00 UTC · Mar 9, 2022Ransomware in the wildCVE-2022-24512 CVE-2022-24459 CVE-2022-21990+3 CVEs1

60