The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 87.4%.
Code Injection
Microsoft
RCE
Windows 7
Windows Server 2003
+3
NVD
Exploit-DB
CVSS 2.0
9.3
EPSS
87.4%
Threat
6.0
Untrusted search path vulnerability in Microsoft Expression Design; Expression Design SP1; and Expression Design 2, 3, and 4 allows local users to gain privileges via a Trojan horse DLL in the. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 44.0%.
Information Disclosure
Microsoft
Expression Design
NVD
Exploit-DB
CVSS 2.0
9.3
EPSS
44.0%
Threat
4.7