The vulnerability arises from a memory release flaw after its effective lifetime in the Remote Desktop Gateway Service. An attacker can trigger the flaw by sending a crafted request over the network, leading to a denial of service that affects the RD Gateway component and, consequently, users relying on remote desktop connections. This is an instance of improper memory management (CWE‑401) and can cause service interruption for the local or remote users depending on the RD Gateway’s role in a network.

Affected systems include Microsoft Windows 10 (Version 1607, 1809) and Windows Server editions from 2012 through 2025, including core installations. The vulnerability is present in the Remote Desktop Gateway Service component across all listed Windows operating systems.

The CVSS score of 7.5 indicates a high severity vulnerability. The EPSS score of 1% suggests a very low probability of exploitation, but the vulnerability is not currently listed in the CISA KEV catalog. Attackers likely need network access to the RD Gateway and the ability to craft specific requests. While no active exploitation has been reported, the potential to disrupt remote desktop services for many users warrants attention and patching.