CVE-2024-38077General(microsoft / windows_server_2008)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

microsoft CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

Weakness type (CWE)

CWE-122

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

windows_server_2008
windows_server_2012
windows_server_2016
windows_server_2019

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
General: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

microsoft

Products

windows_server_2008windows_server_2012windows_server_2016windows_server_2019windows_server_2022windows_server_2022_23h2

2 versions affected across 6 products

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

General

1100.0%

Referenced assets1 URL

By indicator

https://hubs.la/Q04rCxQ90

Full discourse1 post

SOCRadar®@socradar45d
General
The dark web shopping cart is full again this week. 🛒💀 We're tracking alleged sales of a CVE-2024-38077 RCE exploit, 30M Pakistan telecom records, RDWeb access to a Spanish manufacturer, and more. Unverified? Yes. Dangerous? Absolutely. Get timely alerts to mitigate the risk of ransomware and phishing, and strengthen your posture today. 🔍 Read the intel: https://hubs.la/Q04rCxQ90 #CyberSecurity #DarkWeb #ThreatIntel #DataLeak
Post summary
The post mentions unverified reports of a CVE-2024-38077 RCE exploit being traded on the dark web, but provides no evidence of active use, tools, or remediation guidance.
01041539
7.1K followersView on X

CPE platform detail9 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

9 of 9 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	microsoft	windows_server_2008	-	-	x64
OS	microsoft	windows_server_2008	-	-	x86
OS	microsoft	windows_server_2008	r2	-	x64
OS	microsoft	windows_server_2012	-	-	-
OS	microsoft	windows_server_2012	r2	-	-
OS	microsoft	windows_server_2016	-	-	-
OS	microsoft	windows_server_2019	-	-	-
OS	microsoft	windows_server_2022	-	-	-
OS	microsoft	windows_server_2022_23h2	-	-	-

Explore more

Back to dashboard microsoft CVEs windows_server_2008 vulnerabilities