CVE-2019-0887

A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an authenticated attacker abuses clipboard redirection, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

CVSS v3.1

8.0 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

8.5 HIGHAV:N/AC:M/Au:S/C:C/I:C/A:C

EPSS

70.97% chance of exploitation in the next 30 days, 99th percentile

Published

2019-07-15

Updated

2024-08-04

Proof-of-concept exploits (2)

• qianshuidewajueji/CVE-2019-088710★ · 2020-07-19
• t43Wiu6/CVE-2019-088718★ · 2021-01-15

References

• CVE Record
• NVD entry

Related

• CVE-2023-0841
• CVE-2019-0881
• CVE-2019-0888
• CVE-2019-0863
• CVE-2019-0943
• CVE-2019-0859