CVE-2015-2373
The Remote Desktop Protocol (RDP) server service in Microsoft Windows 7 SP1, Windows 8, and...
The Remote Desktop Protocol (RDP) server service in Microsoft Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a series of crafted packets, aka "Remote Desktop Protocol (RDP) Remote Code Execution Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
The Remote Desktop Protocol (RDP) server service in Microsoft Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a series of crafted packets, aka "Remote Desktop Protocol (RDP) Remote Code Execution Vulnerability."
- Record
CVE-2015-2373- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-19
- Updated
- 2026-11-02
CVE List No score
The Remote Desktop Protocol (RDP) server service in Microsoft Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a series of crafted packets, aka "Remote Desktop Protocol (RDP) Remote Code Execution Vulnerability."
- Record
CVE-2015-2373- Updated
- 2026-11-02
EUVDEUVD-2015-2466 No score
The Remote Desktop Protocol (RDP) server service in Microsoft Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a series of crafted packets, aka "Remote Desktop Protocol (RDP) Remote Code Execution Vulnerability."
- Record
EUVD-2015-2466- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8255-6mr6-q2p6 No score
The Remote Desktop Protocol (RDP) server service in Microsoft Windows 7 SP1, Windows 8, and...
The Remote Desktop Protocol (RDP) server service in Microsoft Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a series of crafted packets, aka "Remote Desktop Protocol (RDP) Remote Code Execution Vulnerability."
- Record
GHSA-8255-6mr6-q2p6- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-2373 is a high vulnerability (CVSS 10.0) in Microsoft Windows 7, published July 14, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 37.9%, the 98th percentile. No source names a fixed version.