CVE-2016-0019

high · 8.1

The Remote Desktop Protocol (RDP) service implementation in Microsoft Windows 10 Gold and 1511 allows remote attackers to bypass intended access restrictions and establish sessions for blank-password accounts via a modified RDP client, aka "Windows Remote Desktop Protocol Security Bypass Vulnerability."

8.1

CVSS

12.2%

EPSS (exploit prob.)

96th

EPSS percentile

2016-01-13

Published

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-254

Affected products

Vendor	Product	Affected versions
microsoft	windows_10	all versions
microsoft	windows_10	all versions
microsoft	windows_10	1511
microsoft	windows_10	1511

Check a specific version with /api/v1/cve/match.

References

http://www.securitytracker.com/id/1034659
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-007
http://www.securitytracker.com/id/1034659
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-007

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2016-0019