Remote code execution in Microsoft Windows Remote Desktop Client

CERT-LatestNews ThreatsCybercrime Uncategorized VulnerabilitiesAll VulnerabilitiesMicrosoft VulnerabilitiesOS

Exploit availability: No Description. CWE-20 – Improper Input Validation The vulnerability allows a remote attacker to compromise vulnerable system. The vulnerability exists due to insufficient validation of untrusted input within the Windows Remote Desktop Client when a user connects to a malicious server.