CVE-2020-16927

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RDP service on the target system to stop responding. To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides Remote Desktop Protocol (RDP) services. The update addresses the vulnerability by correcting how RDP handles connection requests.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published: Oct 16, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-169287.8An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attac CVE-2020-169297.8A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An CVE-2020-16939.8A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity attacks via the /rpc/api endpoint. An unauthe CVE-2020-169307.8A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An CVE-2020-169317.8A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An CVE-2020-169327.8A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An CVE-2020-169337.0A security feature bypass vulnerability exists in Microsoft Word software when it fails to properly handle .LNK files. An attacker who su CVE-2020-169347.0An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attac CVE-2020-169357.8An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploite CVE-2020-169367.8An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this CVE-2020-169374.7An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory. An attacker who successfully CVE-2020-169385.5An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully