CVE-2019-0708

Exploitation

Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalog on 2021-11-03. Federal remediation due 2022-05-03.

SSVC decision

• ExploitationactiveCISA reports credible evidence of active exploitation.
• AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
• Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

100.00% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 100.0% of scored records. A rank, not a probability.

NVD base score

9.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-06-17.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2019-05-16 18:17Z7 YR AGO

Last updated

2025-10-21 23:45Z10 MO AGO

Reserved

2018-11-26

Assigning CNA

microsoft

Record state

PUBLISHED

Severity

Critical (CVSS 9.8)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

• CWE-416Use After FreeVariant

Data version

5.1

Document digest

56629ade7699e94387ec01129bc187b05d26df14883fa63f0ab902c48d76b2be

• portal.msrc.microsoft.comhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708x_refsource_MISC
• cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-932041.pdfx_refsource_CONFIRM
• cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-616199.pdfx_refsource_CONFIRM
• cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-433987.pdfx_refsource_CONFIRM
• cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-832947.pdfx_refsource_CONFIRM
• cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-166360.pdfx_refsource_CONFIRM
• cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-406175.pdfx_refsource_CONFIRM
• www.huawei.comhttp://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-windows-enx_refsource_CONFIRM
• www.huawei.comhttp://www.huawei.com/en/psirt/security-notices/huawei-sn-20190515-01-windows-enx_refsource_CONFIRM
• packetstormsecurity.comhttp://packetstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.htmlx_refsource_MISC
• packetstormsecurity.comhttp://packetstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.htmlx_refsource_MISC
• packetstormsecurity.comhttp://packetstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.htmlx_refsource_MISC
• packetstormsecurity.comhttp://packetstormsecurity.com/files/155389/Microsoft-Windows-7-x86-BlueKeep-RDP-Use-After-Free.htmlx_refsource_MISC
• packetstormsecurity.comhttp://packetstormsecurity.com/files/162960/Microsoft-RDP-Remote-Code-Execution.htmlx_refsource_MISC
• www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0708government-resource