{"id":"CVE-2024-38077","aliases":["EUVD-2024-37771","GHSA-9j79-xcx5-mxm4"],"status":"published","title":"Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability","description":"Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.84232,"percentile":0.99701,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-122"],"published":"2024-07-09T17:02:33Z","modified":"2026-06-17T07:39:22Z","exploits":[{"source":"pocgithub","id":"Accord96/CVE-2024-38077-POC","title":"Accord96/CVE-2024-38077-POC","date":"2025-01-23","url":"https://github.com/Accord96/CVE-2024-38077-POC"},{"source":"pocgithub","id":"BBD-YZZ/fyne-gui","title":"BBD-YZZ/fyne-gui","date":"2024-08-15","url":"https://github.com/BBD-YZZ/fyne-gui"},{"source":"pocgithub","id":"Destiny0991/check_38077","title":"Destiny0991/check_38077","date":"2024-08-23","url":"https://github.com/Destiny0991/check_38077"},{"source":"pocgithub","id":"Ermensonx/CVE-2024-38077-MadLicense-exploit","title":"Ermensonx/CVE-2024-38077-MadLicense-exploit","date":"2025-12-14","url":"https://github.com/Ermensonx/CVE-2024-38077-MadLicense-exploit"},{"source":"pocgithub","id":"Sec-Link/CVE-2024-38077","title":"Sec-Link/CVE-2024-38077","date":"2024-08-09","url":"https://github.com/Sec-Link/CVE-2024-38077"},{"source":"pocgithub","id":"SecStarBot/CVE-2024-38077-POC","title":"SecStarBot/CVE-2024-38077-POC","date":"2024-08-09","url":"https://github.com/SecStarBot/CVE-2024-38077-POC"},{"source":"pocgithub","id":"Wlibang/CVE-2024-38077","title":"Wlibang/CVE-2024-38077","date":"2024-08-09","url":"https://github.com/Wlibang/CVE-2024-38077"},{"source":"pocgithub","id":"atlassion/CVE-2024-38077-check","title":"atlassion/CVE-2024-38077-check","date":"2024-08-10","url":"https://github.com/atlassion/CVE-2024-38077-check"},{"source":"pocgithub","id":"lworld0x00/CVE-2024-38077-notes","title":"lworld0x00/CVE-2024-38077-notes","date":"2024-08-10","url":"https://github.com/lworld0x00/CVE-2024-38077-notes"},{"source":"pocgithub","id":"mrmtwoj/CVE-2024-38077","title":"mrmtwoj/CVE-2024-38077","date":"2024-10-09","url":"https://github.com/mrmtwoj/CVE-2024-38077"},{"source":"pocgithub","id":"murphysecurity/RDL-detect","title":"murphysecurity/RDL-detect","date":"2024-08-09","url":"https://github.com/murphysecurity/RDL-detect"},{"source":"pocgithub","id":"psl-b/CVE-2024-38077-check","title":"psl-b/CVE-2024-38077-check","date":"2024-08-09","url":"https://github.com/psl-b/CVE-2024-38077-check"},{"source":"pocgithub","id":"qi4L/CVE-2024-38077","title":"qi4L/CVE-2024-38077","date":"2024-08-09","url":"https://github.com/qi4L/CVE-2024-38077"},{"source":"pocgithub","id":"razureink/cve-2024-38077-madlicense_reproduction","title":"razureink/cve-2024-38077-madlicense_reproduction","date":"2026-07-23","url":"https://github.com/razureink/cve-2024-38077-madlicense_reproduction"},{"source":"pocgithub","id":"starscow/CVE-2024-38077-POC","title":"starscow/CVE-2024-38077-POC","date":"2024-08-09","url":"https://github.com/starscow/CVE-2024-38077-POC"},{"source":"pocgithub","id":"zhuxi1965/CVE-2024-38077-RDLCheck","title":"zhuxi1965/CVE-2024-38077-RDLCheck","date":"2024-08-10","url":"https://github.com/zhuxi1965/CVE-2024-38077-RDLCheck"}],"products":[{"vendor":"microsoft","product":"windows server 2008  service pack 2"},{"vendor":"microsoft","product":"windows server 2008 r2 service pack 1"},{"vendor":"microsoft","product":"windows server 2008 r2 service pack 1 (server core installation)"},{"vendor":"microsoft","product":"windows server 2008 service pack 2"},{"vendor":"microsoft","product":"windows server 2008 service pack 2 (server core installation)"},{"vendor":"microsoft","product":"windows server 2012"},{"vendor":"microsoft","product":"windows server 2012 (server core installation)"},{"vendor":"microsoft","product":"windows server 2012 r2"},{"vendor":"microsoft","product":"windows server 2012 r2 (server core installation)"},{"vendor":"microsoft","product":"windows server 2016"},{"vendor":"microsoft","product":"windows server 2016 (server core installation)"},{"vendor":"microsoft","product":"windows server 2019"},{"vendor":"microsoft","product":"windows server 2019 (server core installation)"},{"vendor":"microsoft","product":"windows server 2022"},{"vendor":"microsoft","product":"windows server 2022, 23h2 edition (server core installation)"},{"vendor":"microsoft","product":"windows_server_2008"},{"vendor":"microsoft","product":"windows_server_2012"},{"vendor":"microsoft","product":"windows_server_2016"},{"vendor":"microsoft","product":"windows_server_2019"},{"vendor":"microsoft","product":"windows_server_2022"},{"vendor":"microsoft","product":"windows_server_2022_23h2"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38077","tags":["vendor-advisory","patch","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38077"},{"url":"https://github.com/advisories/GHSA-9j79-xcx5-mxm4"}],"sources":{"cve":[{"id":"CVE-2024-38077","title":"Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability","description":"Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability","status":"published","published":"2024-07-09T17:02:33.618Z","modified":"2026-02-10T23:34:32.216Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"critical","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:34:16.367792Z"}],"euvd":[{"id":"EUVD-2024-37771","description":"Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability","status":"published","published":"2024-07-09T17:02:33Z","modified":"2026-02-10T23:34:32Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"critical"}],"updated_at":"2026-11-02T19:48:41.30503Z"}],"ghsa":[{"id":"GHSA-9j79-xcx5-mxm4","title":"Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability","description":"Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability","status":"published","published":"2024-07-09T18:30:52Z","modified":"2024-07-09T18:30:52Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:57:40.3547Z"}],"nvd":[{"id":"CVE-2024-38077","description":"Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability","status":"published","published":"2024-07-09T17:15:42.43Z","modified":"2026-06-17T07:39:22.28Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:10:12.016585Z"}]}}