CVE-2024-49105

—

CVSS 3.1

8.4 high

EPSS

2%p73

Published

Dec 12, 2024 (Dec 12, 2024)

Modified

Jun 17, 2026

Description

Remote Desktop Client Remote Code Execution Vulnerability

Vendors: microsoft
Products: remote desktop client, windows app, windows 10 1507, windows 10 1607, windows 10 1809, windows 10 21h2, windows 10 22h2, windows 11 22h2, windows 11 23h2, windows 11 24h2, windows server 2008, windows server 2012
Weakness: CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news2 stories

Microsoft Fixes 72 Flaws, Including Patch for Actively Exploited CLFS Vulnerability

The Hacker NewsDec 11, 15:01 UTC · Dec 11, 2024Vulnerability in the wildCVE-2024-49138 CVE-2022-24521 CVE-2022-37969+6 CVEs

60

Microsoft Patch Tuesday for December 2024 contains four critical vulnerabilities

Cisco TalosDec 10, 20:52 UTC · Dec 10, 2024Vulnerability in the wildCVE-2024-49112 CVE-2024-49124 CVE-2024-49127+20 CVEs

60