Vulnerability · Published Jan 12, 2021 · Assigned by microsoft

CVE-2021-1669Windows Remote Desktop Security Feature Bypass Vulnerability

High 8.8

In plain English

A high-severity security flaw in Microsoft Remote Desktop for IoS from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.2% (higher than 88% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)3.2%top 11.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Windows Remote Desktop Security Feature Bypass Vulnerability

Affected products (as reported)

Vendor	Product	Versions
Microsoft	Windows 10 Version 20H2	10.0.0 – before publication
Microsoft	Windows Server version 20H2	10.0.0 – before publication
Microsoft	Windows 10 Version 1803	10.0.0 – before publication
Microsoft	Windows 10 Version 1809	10.0.0 – before publication
Microsoft	Windows Server 2019	10.0.0 – before publication
Microsoft	Windows 10 Version 1909	10.0.0 – before publication
Microsoft	Windows Server, version 1909 (Server Core installation)	10.0.0 – before publication
Microsoft	Windows 10 Version 2004	10.0.0 – before publication
Microsoft	Windows Server version 2004	10.0.0 – before publication
Microsoft	Windows 10 Version 1507	10.0.0 – before publication
Microsoft	Windows 10 Version 1607	10.0.0 – before publication
Microsoft	Windows Server 2016	10.0.0 – before publication
Microsoft	Windows Server 2016 (Server Core installation)	10.0.0 – before publication
Microsoft	Microsoft Remote Desktop for Mac	1.0.0 – before publication
Microsoft	Microsoft Remote Desktop for IoS	1.0.0 – before publication
Microsoft	Remote Desktop client for Windows Desktop	1.2.0.0 – before publication

References

Windows Remote Desktop Security Feature Bypass Vulnerability vendor-advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1669 x_refsource_MISC, x_transferred