Vulnerability Spotlight: Two vulnerabilities in RDP for Windows 7, XP

Summary: Cisco Talos discovered two vulnerabilities in Microsoft Remote Desktop Services: a denial-of-service flaw affecting Windows 7/Server 2008 with RDP 8.0 enabled, Windows 8/Server 2012, and Windows 10/Server 2016, plus information leak vulnerabilities in the RDP7 implementation on Windows XP. Microsoft patched the denial-of-service issue for all affected versions in December's Patch Tuesday but declined to patch the Windows XP flaw because it is out of support.
Bottom line: The Windows XP information leak (TALOS-2019-0895/CVE-2019-1489) lets an attacker negotiate T.128 capabilities and read returned data to learn about the target's address space, and Microsoft has said it will not fix it - so any XP system still reachable over RDP carries an unpatched flaw with no vendor remedy.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2019-1489
Related: Patch Tuesday, December 2019 Edition Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026