NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2024-38077

CVSS 3.1: 9.8 critical
EPSS: 84%p100
Published: Jul 9, 2024 · Jul 9, 2024
Modified: Jun 17, 2026

Analyze CVE-2024-38077 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Vendors: microsoft

Products: windows server 2008, windows server 2012, windows server 2016, windows server 2019, windows server 2022, windows server 2022 23h2

Weakness: CWE-122

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (84.1%)

In the news

4 stories

Microsoft Fixes Four Zero

Infosecurity MagazineJul 10, 09:40 UTC · Jul 10, 2024Exploit / PoCExploitedCVE-2024-38080 CVE-2024-38112 CVE-2024-35264+62 · 1 read

60

Microsoft Patch Tuesday, July 2024 Edition

Krebs on SecurityJul 9, 21:17 UTC · Jul 9, 2024VulnerabilityExploitedCVE-2024-38080 CVE-2024-38112 CVE-2024-38021+54 · 1 read

60

Largest Patch Tuesday in 3 months includes 5 critical vulnerabilities

Cisco TalosJul 9, 18:10 UTC · Jul 9, 2024VulnerabilityExploitedCVE-2024-38023 CVE-2024-38060 CVE-2024-38074+74 · 1 read

60

Microsoft fixes two zero-days exploited by attackers (CVE-2024-38080, CVE-2024-38112)

Help Net SecurityJul 9, 00:00 UTC · Jul 9, 2024VulnerabilityExploitedCVE-2024-38080 CVE-2024-38112 CVE-2024-35264+56 · 1 read

60