Urgent Remote Code Execution Vulnerability in RDS protocol. Vulnerability Score - HIGH
Security Vulnerability - Security Advisory Yesterday – 05/14/2019 Microsoft announced a new “worm-able” vulnerability in Remote Desktop Service protocol. If your RDS/RDP/Microsoft remote desktop is not patched or…
Security Vulnerability - Security Advisory
Yesterday – 05/14/2019 Microsoft announced a new “worm-able” vulnerability in Remote Desktop Service protocol.
If your RDS/RDP/Microsoft remote desktop is not patched or covered by VPN/Firewalls – a remote exploitation with execution and infection from “outside” your security perimeter is possible.
This means that an “outside” bad actor can access and infect your desktops/servers then use them to attack other computers.
Affected systems: any 2008R2 and earlier, WinXP, win7, Win Server 2003 are all affected.
A Microsoft patch is available.
For more information refer to this article…
Digital Edge Cyber Security Team will be patching fully managed clients.
If anyone needs our immediate assistance please contact our support team.
Digital Edge
(800)-714-5143
Updated November 2026: the original post is kept above; the sections below add context for readers today.
BlueKeep and exposed remote desktop
This vulnerability became known as BlueKeep. Microsoft released patches even for Windows XP and Server 2003, and working exploits appeared later in 2019. Remote Desktop exposed to the internet is still one of the most common ways ransomware groups get in.
- Never expose RDP directly to the internet; use a VPN or a remote access gateway with multifactor authentication.
- Turn on Network Level Authentication.
- Patch every month and retire systems that no longer get updates.
Digital Edge continuous monitoring finds exposed services before attackers do.
