Remote Desktop Protocol Client Information Disclosure Vulnerability

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00928.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Microsoft Windows 10 Version 1809 affected
Version Status Constraints
10.0.17763.0 affected < 10.0.17763.4252
Microsoft Windows 10 Version 1809 affected
Version Status Constraints
10.0.0 affected < 10.0.17763.4252
Microsoft Windows Server 2019 affected
Version Status Constraints
10.0.17763.0 affected < 10.0.17763.4252
Microsoft Windows Server 2019 (Server Core installation) affected
Version Status Constraints
10.0.17763.0 affected < 10.0.17763.4252
Microsoft Remote Desktop client for Windows Desktop affected
Version Status Constraints
1.2.0.0 affected < 1.2.4157.0
Microsoft Windows Server 2022 affected
Version Status Constraints
10.0.20348.0 affected < 10.0.20348.1668
Microsoft Windows 10 Version 20H2 affected
Version Status Constraints
10.0.0 affected < 10.0.19042.2846
Microsoft Windows 11 version 21H2 affected
Version Status Constraints
10.0.0 affected < 10.0.22000.1817
Microsoft Windows 10 Version 21H2 affected
Version Status Constraints
10.0.19043.0 affected < 10.0.19044.2846
Microsoft Windows 11 version 22H2 affected
Version Status Constraints
10.0.22621.0 affected < 10.0.22621.1555
Microsoft Windows 10 Version 22H2 affected
Version Status Constraints
10.0.19045.0 affected < 10.0.19045.2846
Microsoft Windows 10 Version 1507 affected
Version Status Constraints
10.0.10240.0 affected < 10.0.10240.19869
Microsoft Windows 10 Version 1607 affected
Version Status Constraints
10.0.14393.0 affected < 10.0.14393.5850
Microsoft Windows Server 2016 affected
Version Status Constraints
10.0.14393.0 affected < 10.0.14393.5850
Microsoft Windows Server 2016 (Server Core installation) affected
Version Status Constraints
10.0.14393.0 affected < 10.0.14393.5850
Microsoft Windows Server 2008 R2 Service Pack 1 affected
Version Status Constraints
6.1.7601.0 affected < 6.1.7601.26466
Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation) affected
Version Status Constraints
6.1.7601.0 affected < 6.1.7601.26466
Microsoft Windows Server 2012 affected
Version Status Constraints
6.2.9200.0 affected < 6.2.9200.24216
Microsoft Windows Server 2012 (Server Core installation) affected
Version Status Constraints
6.2.9200.0 affected < 6.2.9200.24216
Microsoft Windows Server 2012 R2 affected
Version Status Constraints
6.3.9600.0 affected < 6.3.9600.20919
Microsoft Windows Server 2012 R2 (Server Core installation) affected
Version Status Constraints
6.3.9600.0 affected < 6.3.9600.20919

Configuration 1 [-]

OR cpe:2.3:a:microsoft:remote_desktop_client:*:*:*:*:*:windows:*:*
cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Microsoft Subscribe
Remote Desktop Client Subscribe
Windows 10 1507 Subscribe
Windows 10 1607 Subscribe
Windows 10 1809 Subscribe
Windows 10 20h2 Subscribe
Windows 10 21h2 Subscribe
Windows 10 22h2 Subscribe
Windows 11 21h2 Subscribe
Windows 11 22h2 Subscribe
Windows Server 2008 Subscribe
Windows Server 2012 Subscribe
Windows Server 2016 Subscribe
Windows Server 2019 Subscribe
Windows Server 2022 Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2023-31974 Remote Desktop Protocol Client Information Disclosure Vulnerability
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28267 cve-icon cve-icon
History

Mon, 07 Jul 2025 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Microsoft remote Desktop Client
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:a:microsoft:remote_desktop:*:*:*:*:*:windows:*:* cpe:2.3:a:microsoft:remote_desktop_client:*:*:*:*:*:windows:*:*
Vendors & Products Microsoft remote Desktop
Microsoft remote Desktop Client

Wed, 01 Jan 2025 02:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 01 Jan 2025 01:45:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:microsoft:remote_desktop:-:*:*:*:*:windows:*:*
cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.19869:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.19869:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.5850:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.5850:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.4252:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.4252:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.4252:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.2846:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.2846:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_21H2:10.0.19044.2846:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_10_21H2:10.0.19044.2846:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_21H2:10.0.19044.2846:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.2846:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.2846:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.2846:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_11_21H2:10.0.22000.1817:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_11_21H2:10.0.22000.1817:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_11_22H2:10.0.22621.1555:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_11_22H2:10.0.22621.1555:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.26466:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.24216:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20919:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.5850:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.4252:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.1668:*:*:*:*:*:*:*
Vendors & Products Microsoft windows 10 20h2
Microsoft windows 10 21h2
Microsoft windows 10 22h2
Microsoft windows 11 21h2
Microsoft windows 11 22h2
Microsoft windows Server 2008 R2
Microsoft windows Server 2012 R2

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2025-01-23T01:05:06.143Z

Reserved: 2023-03-13T22:23:36.181Z

Link: CVE-2023-28267

cve-icon Vulnrichment

Updated: 2024-08-02T12:30:24.728Z

cve-icon NVD

Status : Analyzed

Published: 2023-04-11T21:15:25.777

Modified: 2025-07-07T18:48:35.783

Link: CVE-2023-28267

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses