CVE-2022-3641: Devolutions Remote Desktop Manager

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Elevation of privilege in the Azure SQL Data Source in Devolutions Remote Desktop Manager 2022.3.13 to 2022.3.24 allows an authenticated user to spoof a privileged account.

Affected products

• Devolutions Remote Desktop Manager: from 2022.3.13, before 2022.3.26 (fixed in 2022.3.26)

Published 2022-12-12. Last modified 2026-06-17.