CVE-2019-0708

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

• CWE-416
• CWE-416

• https://packetstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
• https://packetstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
• https://packetstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.htmlExploit, Third Party Advisory, VDB Entry
• https://packetstormsecurity.com/files/155389/Microsoft-Windows-7-x86-BlueKeep-RDP-Use-After-Free.htmlThird Party Advisory, VDB Entry
• https://packetstormsecurity.com/files/162960/Microsoft-RDP-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-windows-enThird Party Advisory
• https://www.huawei.com/en/psirt/security-notices/huawei-sn-20190515-01-windows-enThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-166360.pdfThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-406175.pdfThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-433987.pdfThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-616199.pdfThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-832947.pdfThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-932041.pdfThird Party Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708Patch, Vendor Advisory
• https://packetstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
• https://packetstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
• https://packetstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.htmlExploit, Third Party Advisory, VDB Entry
• https://packetstormsecurity.com/files/155389/Microsoft-Windows-7-x86-BlueKeep-RDP-Use-After-Free.htmlThird Party Advisory, VDB Entry
• https://packetstormsecurity.com/files/162960/Microsoft-RDP-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-windows-enThird Party Advisory
• https://www.huawei.com/en/psirt/security-notices/huawei-sn-20190515-01-windows-enThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-166360.pdfThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-406175.pdfThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-433987.pdfThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-616199.pdfThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-832947.pdfThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-932041.pdfThird Party Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708Patch, Vendor Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0708US Government Resource

Published

May 16, 2019

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-0702An information disclosure vulnerability exists when the Wind…
• CVE-2019-0703An information disclosure vulnerability exists in the way th…6.5
• CVE-2019-0704An information disclosure vulnerability exists in the way th…
• CVE-2019-0705Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-0706Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-0707An elevation of privilege vulnerability exists in the Networ…
• CVE-2019-0709A remote code execution vulnerability exists when Windows Hy…7.6
• CVE-2019-0710A denial of service vulnerability exists when Microsoft Hype…6.8
• CVE-2019-0711A denial of service vulnerability exists when Microsoft Hype…6.8
• CVE-2019-0712A denial of service vulnerability exists when Microsoft Hype…6.8
• CVE-2019-0713A denial of service vulnerability exists when Microsoft Hype…6.8
• CVE-2019-0714A denial of service vulnerability exists when Microsoft Hype…5.8