First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2024-38258

HighCVSS 7.5/10Last modified Aug 10, 2026

Description

Windows Remote Desktop Licensing Service Information Disclosure Vulnerability

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published: Sep 10, 2024
Last modified: Aug 10, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-382598.8Microsoft Management Console Remote Code Execution Vulnerability CVE-2024-38268.6In versions of Akana in versions prior to and including 2022.1.3 validation is broken when using the SAML Single Sign-On (SSO) functionality CVE-2024-382608.8Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability CVE-2024-382617.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CVE-2024-382627.5Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability CVE-2024-382637.5Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability CVE-2024-382645.9Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability CVE-2024-382658.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CVE-2024-382664.9An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware v CVE-2024-382674.9An improper restriction of operations within the bounds of a memory buffer in the IPv6 address parser of the Zyxel VMG8825-T50K firmware ver CVE-2024-382684.9An improper restriction of operations within the bounds of a memory buffer in the MAC address parser of the Zyxel VMG8825-T50K firmware vers CVE-2024-382694.9An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmwar

CVE-2024-38258: High severity, CVSS 7.5 | Vulnix