CVE-2024-38077

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

84.11% chance of exploitation in the next 30 days, 100th percentile

Published

2024-07-09

Updated

2026-02-10

Proof-of-concept exploits (9)

• Accord96/CVE-2024-38077-POC0★ · 2025-01-23
• Sec-Link/CVE-2024-380771★ · 2024-08-09
• SecStarBot/CVE-2024-38077-POC9★ · 2024-08-09
• Wlibang/CVE-2024-380773★ · 2024-08-09
• mrmtwoj/CVE-2024-3807718★ · 2024-10-09
• qi4L/CVE-2024-38077224★ · 2024-08-14
• zhuxi1965/CVE-2024-38077-RDLCheck7★ · 2024-08-10
• Ermensonx/CVE-2024-38077-MadLicense-exploit
• razureink/cve-2024-38077-madlicense_reproduction

References

• CVE Record
• NVD entry

Related

• CVE-2018-14847
• CVE-2023-25136
• CVE-2023-28452
• CVE-2023-29483
• CVE-2023-38709
• CVE-2024-38472