CVE-2024-38077

—

CVSS 3.1

9.8 critical

EPSS

84%p100

Published

Jul 9, 2024 (Jul 9, 2024)

Modified

Jun 17, 2026

Description

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Vendors: microsoft
Products: windows server 2008, windows server 2012, windows server 2016, windows server 2019, windows server 2022, windows server 2022 23h2
Weakness: CWE-122
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (84.1%)

In the news4 stories

Microsoft Fixes Four Zero

Infosecurity MagazineJul 10, 09:40 UTC · Jul 10, 2024Exploit / PoC in the wildCVE-2024-38080 CVE-2024-38112 CVE-2024-35264+6 CVEs

60

Microsoft Patch Tuesday, July 2024 Edition

Krebs on SecurityJul 9, 21:17 UTC · Jul 9, 2024Vulnerability in the wildCVE-2024-38080 CVE-2024-38112 CVE-2024-38021+5 CVEs1

60

Largest Patch Tuesday in 3 months includes 5 critical vulnerabilities

Cisco TalosJul 9, 18:10 UTC · Jul 9, 2024Vulnerability in the wildCVE-2024-38023 CVE-2024-38060 CVE-2024-38074+7 CVEs

60

Microsoft fixes two zero-days exploited by attackers (CVE-2024-38080, CVE-2024-38112)

Help Net SecurityJul 9, 00:00 UTC · Jul 9, 2024Vulnerability in the wildCVE-2024-38080 CVE-2024-38112 CVE-2024-35264+5 CVEs

60