Microsoft Remote Desktop Connection vulnerabilities

2 CVEs affecting Microsoft Remote Desktop Connection, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-1296, published 2013-04-09.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-1296, published 2013-04-09. High severity, CVSS 9.3. EPSS: 20.7% chance of exploitation in the next 30 days. The Remote Desktop ActiveX control in mstscax.dll in Microsoft Remote Desktop Connection Client 6.1 and 7.0 does not properly handle objects in memory, which allows remote attackers to execute…
• CVE-2005-1794, published 2005-06-01. High severity, CVSS 7.4. EPSS: 16.3% chance of exploitation in the next 30 days. Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of…