CVE-2024-43455

CriticalCVSS 9.8/10Last modified Aug 10, 2026

Description

Windows Remote Desktop Licensing Service Spoofing Vulnerability

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Sep 10, 2024
Last modified
Aug 10, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-434567.4Windows Remote Desktop Services Tampering VulnerabilityCVE-2024-434577.8Windows Setup and Deployment Elevation of Privilege VulnerabilityCVE-2024-434587.7Windows Networking Information Disclosure VulnerabilityCVE-2024-434598.8SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-43469.1The Startklar Elementor Addons plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 1.7.13. TCVE-2024-434608.8Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileCVE-2024-434618.8Windows MSHTML Platform Spoofing VulnerabilityCVE-2024-434628.8SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-434637.8Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2024-434647.2Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2024-434657.8Microsoft Excel Elevation of Privilege VulnerabilityCVE-2024-434667.5Microsoft SharePoint Server Denial of Service Vulnerability