CVE-2024-38077
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CRITICAL 9.8EPSS 84.2%
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Affected
- Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows Server 2022 · Windows Server 2022, 23H2 Edition (Server Core installation) · Windows Server 2016 · Windows Server 2016 (Server Core installation)
- CVSS v3.1 MICROSOFT
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 84.23% chance of exploitation in the next 30 days, 100th percentile
- Published
- 2024-07-09
- Updated
- 2026-02-10
Proof-of-concept exploits (10)
- Accord96/CVE-2024-38077-POC0★ · 2025-01-23
- Sec-Link/CVE-2024-380771★ · 2024-08-09
- SecStarBot/CVE-2024-38077-POC9★ · 2024-08-09
- Wlibang/CVE-2024-380773★ · 2024-08-09
- mrmtwoj/CVE-2024-3807718★ · 2024-10-09
- qi4L/CVE-2024-38077223★ · 2024-08-14
- zhuxi1965/CVE-2024-38077-RDLCheck7★ · 2024-08-10
- Ermensonx/CVE-2024-38077-MadLicense-exploit1★ · 2025-12-18
- razureink/cve-2024-38077-madlicense_reproduction0★ · 2026-07-23
- starscow/CVE-2024-38077-POC0★ · 2024-08-09