Loading CVE intelligence

CVE-2019-0708

CriticalPublished

Microsoft Remote Desktop Services Remote Code Execution Vulnerability

Published: May 16, 2019
Updated: Oct 21, 2025
Assigning CNA: microsoft
Evidence observed: May 30, 2019

Primary CVSS

9.8/ 10Critical

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS probability estimate

100.0%

High · next 30 days

Percentile: 100.0%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

CISA Known Exploited

This CVE appears in the CISA Known Exploited Vulnerabilities catalog.

Summary

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

Sources

112

CVE-2019-0708-RCEExploit
CVE-2019-0708 RCE远程代码执行getshell教程
bluekeepExploit
Public work for CVE-2019-0708
CVE-2019-0708-testDetection
CVE-2019-0708 C#验证漏洞
CVE-2019-0708

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.

Scanner

Scanner PoC for CVE-2019-0708 RDP RCE vuln

bluekeepscanScanner

CVE-2019-0708

CVE-2019-0708-pocScanner

CVE-2019-0708 远程代码执行漏洞批量检测

CVE-2019-0708-EXP-WindowsExploit

CVE-2019-0708-EXP-Windows版单文件exe版,运行后直接在当前控制台反弹System权限Shell

cve-2019-0708_bluekeep_rceExploit

it works on xp (all version sp2 sp3)

CVE-2019-0708-Msf--Scanner

CVE-2019-0708-Msf-验证

Mass-scanner-for-CVE-2019-0708-RDP-RCE-ExploitScanner

Scan through given ip list

CVE-Exploitation-ReportsResearch

CVE Exploitation Reports: CVE-2007-3280, CVE-2017-0144, CVE-2019-0708

CVE-2019-0708-POCScanner

Batch vulnerability scanner for CVE-2019-0708 (BlueKeep) with multi-threaded IP:port detection, enabling rapid assessment of RDP services across networks.

BlueKeepPoC

Proof of concept for CVE-2019-0708

CVE-2019-0708Scanner

BlueKeep (CVE-2019-0708) vulnerability checker integrated with Goby's network asset discovery and scanning framework for rapid security assessment.

Windows-2Research

A hands-on Windows 7 lab designed to demonstrate the real-world impact of the BlueKeep (CVE-2019-0708) vulnerability through practical exploitation and security analysis.

CVE-2019-0708Poc-BatchScanningScanner

Batch scanning tool for CVE-2019-0708 (BlueKeep) vulnerability detection on Windows systems, supporting single and multi-IP scanning with custom IP lists and output storage.

CVE-2019-0708Scanner

Batch scanner for CVE-2019-0708 (BlueKeep) remote code execution vulnerability. Scans IP lists with configurable threading to detect vulnerable RDP hosts.

CVE-2019-0708Scanner

3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check)

CVE-2019-0708PoC

Only Hitting PoC [Tested on Windows Server 2008 r2]

CVE-2019-0708-scanScanner

Batch scanner for CVE-2019-0708 (BlueKeep) RDP vulnerability with Windows and Linux support, using rdpscan and custom Cscan for mass IP range detection.

CVE-2019-0708PoC

dump

Bluekeep-Metasploit-Lab-ProjectPoC

Exploiting Bluekeep (CVE-2019-0708) on windows 7 using metasploit (Esucational lab)

Bluekeep-HunterScanner

CVE-2019-0708, A tool which mass hunts for bluekeep vulnerability for exploitation.

msf-module-CVE-2019-0708Exploit

Metasploit module for CVE-2019-0708 (BlueKeep) - https://github.com/rapid7/metasploit-framework/tree/5a0119b04309c8e61b44763ac08811cd3ecbbf8d/modules/exploits/windows/rdp