CVE-2019-1226

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would need to send a specially crafted request to the target systems Remote Desktop Service via RDP. The update addresses the vulnerability by correcting how Remote Desktop Services handles connection requests.

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190819-01-windows-enThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-187667.pdf
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1226Patch, Vendor Advisory
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190819-01-windows-enThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-187667.pdf
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1226Patch, Vendor Advisory

Published

Aug 14, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-12254In multiple Tecson Tankspion and GOKs SmartBox 4 products th…9.8
• CVE-2019-12255Wind River VxWorks has a Buffer Overflow in the TCP componen…9.8
• CVE-2019-12256Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the …9.8
• CVE-2019-12257Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in …8.8
• CVE-2019-12258Wind River VxWorks 6.6 through vx7 has Session Fixation in t…7.5
• CVE-2019-12259Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array i…7.5
• CVE-2019-12260Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the …9.8
• CVE-2019-12261Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overf…9.8
• CVE-2019-12262Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Ac…9.8
• CVE-2019-12263Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in th…8.1
• CVE-2019-12264Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has …7.1
• CVE-2019-12265Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a…5.3