CVE-2021-38666

Remote Desktop Client Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Affected

Microsoft · Remote Desktop client for Windows Desktop · Windows 10 Version 1507 · Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 1909 · Windows 10 Version 2004

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

15.18% chance of exploitation in the next 30 days, 97th percentile

Published

2021-11-10

Updated

2026-08-19

Proof-of-concept exploits (1)

• DarkSprings/CVE-2021-38666-poc2★ · 2021-11-12

Security advisories

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38666

References

• CVE Record
• NVD entry

Related

• CVE-2021-38639
• CVE-2021-40444
• CVE-2021-40539
• CVE-2021-42321
• CVE-2021-43267