cbcvebase.
CVE-2025-32710
published 2025-06-10

CVE-2025-32710: Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

high8.1CVSS 3.1
AVNACHPRNUINSUCHIHAH
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

Affected

25 ranges
VendorProductVersion rangeFixed in
microsoftwindows_server_2008
microsoftwindows_server_2008_r2_service_pack_1>= 6.1.7601.0 < 6.1.7601.277296.1.7601.27729
microsoftwindows_server_2008_service_pack_2>= 6.0.6003.0 < 6.0.6003.233176.0.6003.23317
microsoftwindows_server_2012
microsoftwindows_server_2012>= 6.2.9200.0 < 6.2.9200.254756.2.9200.25475
microsoftwindows_server_2012_r2>= 6.3.9600.0 < 6.3.9600.225776.3.9600.22577
microsoftwindows_server_2016< 10.0.14393.806610.0.14393.8066
microsoftwindows_server_2016>= 10.0.14393.0 < 10.0.14393.806610.0.14393.8066
microsoftwindows_server_2019< 10.0.17763.731410.0.17763.7314
microsoftwindows_server_2019>= 10.0.17763.0 < 10.0.17763.731410.0.17763.7314
microsoftwindows_server_2022< 10.0.20348.363010.0.20348.3630
microsoftwindows_server_2022>= 10.0.20348.0 < 10.0.20348.369210.0.20348.3692
microsoftwindows_server_2022_23h2< 10.0.25398.161110.0.25398.1611
microsoftwindows_server_2025< 10.0.26100.398110.0.26100.3981
microsoftwindows_server_2025>= 10.0.26100.0 < 10.0.26100.406110.0.26100.4061
msrcwindows_server_2008_for_32-bit_systems_service_pack_2
msrcwindows_server_2008_for_x64-based_systems_service_pack_2
msrcwindows_server_2008_r2_for_x64-based_systems_service_pack_1
msrcwindows_server_2012
msrcwindows_server_2012_r2
msrcwindows_server_2016
msrcwindows_server_2019
msrcwindows_server_2022
msrcwindows_server_2022_23h2_edition
msrcwindows_server_2025