CVE-2024-43456

HighCVSS 7.4/10Last modified Jun 17, 2026

Description

Windows Remote Desktop Services Tampering Vulnerability

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Oct 8, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-434577.8Windows Setup and Deployment Elevation of Privilege VulnerabilityCVE-2024-434587.7Windows Networking Information Disclosure VulnerabilityCVE-2024-434598.8SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-43469.1The Startklar Elementor Addons plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 1.7.13. TCVE-2024-434608.8Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileCVE-2024-434618.8Windows MSHTML Platform Spoofing VulnerabilityCVE-2024-434628.8SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-434637.8Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2024-434647.2Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2024-434657.8Microsoft Excel Elevation of Privilege VulnerabilityCVE-2024-434667.5Microsoft SharePoint Server Denial of Service VulnerabilityCVE-2024-434677.5Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability