---
id: "CVE-2019-0708"
kind: "vulnerability"
aliases: ["CVE-2019-0708"]
title: "Microsoft Remote Desktop Services: Microsoft Remote Desktop Services Remote Code Execution Vulnerability"
severity: "critical"
cvss: 10.0
epss: 0.99999
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Microsoft Remote Desktop Services", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "infrastructure", "ransomware", "rdp", "remote-desktop-services", "windows"]
not_affected_if: ["patched", "rdp-disabled"]
published_at: "2019-05-16T19:29:00+00:00"
first_seen_at: "2026-10-23T19:11:53+00:00"
updated_at: "2026-10-23T21:57:34+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0708", "first_seen_at": "2026-10-23T19:11:53+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-0708", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0708", "first_seen_at": "2026-10-23T21:57:34+00:00"}]
---

# Microsoft Remote Desktop Services: Microsoft Remote Desktop Services Remote Code Execution Vulnerability

Microsoft Remote Desktop Services (RDP) has a flaw that lets an unauthenticated attacker send crafted requests over RDP. Successful exploitation gives remote code execution on the target, and this one is known as BlueKeep and is exploited in the wild with ransomware use noted.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Microsoft Remote Desktop Services affected ? fixed ?

## Fix

Apply the Microsoft update for CVE-2019-0708 per vendor instructions (CISA KEV required action).

## Timeline

- 2026-10-23T19:11:53+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0708
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2019-0708
- 2026-10-23T21:57:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2019-0708

## From the sources

Microsoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulnerability that allows an unauthenticated attacker to connect to the target system using RDP and send specially crafted requests. Successful exploitation allows for remote code execution. The vulnerability is also known under the moniker of BlueKeep.

CISA required action: Apply updates per vendor instructions.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_