Microsoft Remote Desktop Connection — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Remote Desktop Connection, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2013-1296 — CVSS 9.3 (critical): The Remote Desktop ActiveX control in mstscax.dll in Microsoft Remote Desktop Connection Client 6.1 and 7.0 does not properly handle…
• CVE-2005-1794 — CVSS 7.4 (high): Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a…