# CVE-2024-43455: Microsoft Windows Remote Desktop Licensing Service spoofing vulnerability

Source: https://junglewise.ai/threats/cve-2024-43455-microsoft-windows-remote-desktop-licensing-service-spoofing  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2024-09-10. Updated: 2026-05-11  
License: CC BY 4.0 with a link back

CVE-2024-43455 · Severity: high · CVSS 8.8 · Published 2024-09-10

A vulnerability exists in the Windows Remote Desktop Licensing Service, which manages client licenses for Remote Desktop sessions. An attacker could exploit this flaw to impersonate legitimate users or services, potentially gaining unauthorized access to sensitive data or administrative functions. This could lead to a breach of confidentiality and integrity within the server environment.

Technologies: [Microsoft Windows Server 2008](https://junglewise.ai/threats/technologies/windows-server-2008), [Microsoft Windows Server 2012](https://junglewise.ai/threats/technologies/windows-server-2012), [Microsoft Windows Server 2016](https://junglewise.ai/threats/technologies/windows-server-2016), [Microsoft Windows Server 2019](https://junglewise.ai/threats/technologies/windows-server-2019), [Microsoft Windows Server 2022](https://junglewise.ai/threats/technologies/windows-server-2022), [Microsoft Windows Server 2022 23h2](https://junglewise.ai/threats/technologies/windows-server-2022-23h2). Vendors: [Microsoft](https://junglewise.ai/threats/vendors/microsoft).

## Quick answers

**Is CVE-2024-43455 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2024-43455 being exploited in the wild.

**How severe is CVE-2024-43455?** High severity, with a CVSS score of 8.8, published 10 September 2024.

**Which products and versions are affected?** Microsoft Windows Server 2008 Service Pack 2, R2 Service Pack 1; Microsoft Windows Server 2012 R2; Microsoft Windows Server 2016 versions prior to 10.0.14393.7336; Microsoft Windows Server 2019 versions prior to 10.0.17763.6293; and 2 more.

**Is there a fix for CVE-2024-43455?** A patch was published on 2024-09-10: Microsoft released security updates as part of Patch Tuesday. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2024-43455 attacked?** It is attacked over the network, in an operating system.

**Am I affected by CVE-2024-43455?** Check whether you run Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A spoofing vulnerability exists in the Windows Remote Desktop Licensing Service due to improper input validation (CWE-20). An authenticated attacker with low privileges can exploit this over the network without user interaction. Successful exploitation allows the attacker to spoof identities, potentially leading to unauthorized access or further privilege escalation within the domain. Microsoft has released security updates to address this issue across supported Windows Server versions.

## Affected products

- Microsoft Windows Server 2008 Service Pack 2, R2 Service Pack 1
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2016 versions prior to 10.0.14393.7336
- Microsoft Windows Server 2019 versions prior to 10.0.17763.6293
- Microsoft Windows Server 2022 versions prior to 10.0.20348.2700
- Microsoft Windows Server 2022, 23H2 versions prior to 10.0.25398.1128

## Timeline

- 2024-09-10: disclosed
- 2024-09-10: patched: Microsoft released security updates as part of Patch Tuesday.

## References

- [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43455](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43455)

## Related threats

- [Windows DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97844-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to)
- [Windows DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97843-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to)
- [Windows DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97842-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to)
- [Windows DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97841-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to)
- [DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97840-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to)