CVE-2019-0708

99

FAUCET Score

CVE-2019-0708, known as BlueKeep, is a critical remote code execution vulnerability in Microsoft Remote Desktop Services, affecting various Windows operating systems including older versions like XP and 7, as well as products from Huawei and Siemens. This vulnerability allows an unauthenticated attacker to execute arbitrary code on a target system by sending specially crafted RDP requests, earning a CVSS score of 9.8 (Critical) due to its network-based attack vector, low complexity, and complete compromise potential (confidentiality, integrity, availability). BlueKeep is actively exploited in the wild, including in known ransomware campaigns, with multiple public exploit modules available in Metasploit and ExploitDB, and has garnered significant community discussion and media coverage.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		Range not provided by sourceCPE matchmatch criteria	cpe:2.3:o:microsoft:windows_7:-:sp1::::::
		Range not provided by sourceCPE matchmatch criteria	cpe:2.3:o:microsoft:windows_server_2008:-:sp2::::::
		r2CPE matchmatch criteria	cpe:2.3:o:microsoft:windows_server_2008:r2:sp1::::::
		All Versions ImpactedCPE matchmatch criteria	cpe:2.3:o:siemens:axiom_multix_m_firmware::::::::
		All Versions ImpactedCPE matchmatch criteria	cpe:2.3:o:siemens:axiom_vertix_md_trauma_firmware::::::::

CVSS Data

CVSS version used by this source: 3.1

9.8CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

3.9

Impact Score

5.9

CvssVersion

3.1

Exploit Intelligence

EPSS Score

100.00%

Probability of exploitation in next 30 days

EPSS Percentile

100.0%

Percentile rank of EPSS score among Peer Group

As of 2026-07-26

Model: v2026.06.15

Added to KEV · Nov 3, 2021

Metasploit: CVE-2019-0708 BlueKeep Microsoft Remote Desktop RCE Check · May 14, 2019

ExploitDB: EDB-47683 · Nov 19, 2019

This CVE's current EPSS score of 1.0000 is in the 100th percentile among its peer group of 36,833 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (16)

microsoftpatch availablevia nvd_reference

microsoftpatch availablevia msrc

Product: Windows Server 2008 for x64-based Systems Service Pack 2

microsoftpatch availablevia msrc

Product: Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

microsoftpatch availablevia msrc

Product: Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1

microsoftpatch availablevia msrc

Product: Windows Server 2008 R2 for x64-based Systems Service Pack 1

microsoftpatch availablevia msrc

Product: Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

microsoftpatch availablevia msrc

Product: Windows 7 for 32-bit Systems Service Pack 1

microsoftpatch availablevia msrc

Product: Windows 7 for x64-based Systems Service Pack 1

microsoftpatch availablevia msrc

Product: Windows Server 2008 for 32-bit Systems Service Pack 2

microsoftpatch availablevia msrc

Product: Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)

microsoftpatch availablevia msrc

Product: Windows Server 2008 for Itanium-Based Systems Service Pack 2

amazonvendor investigatingvia llm_extracted

apollographqlvendor investigatingvia llm_extracted

dfinityvendor investigatingvia llm_extracted

fleetdmvendor investigatingvia llm_extracted

mathworksvendor investigatingvia llm_extracted

Vendor Advisories (16)

dfinityllm-dfinity-1b73c5ecb75a5911CRITICAL

Remote Desktop Services Remote Code Execution Vulnerability in Rexroth Industrial PCs

amazonllm-amazon-3fc32dcfb1ac2e09CRITICAL

Remote Desktop Services Remote Code Execution Vulnerability in Rexroth Industrial PCs

mathworksllm-mathworks-ddf139e29515af21CRITICAL

Remote Desktop Services Remote Code Execution Vulnerability in Rexroth Industrial PCs

apollographqlllm-apollographql-f2bf260c55067c9dCRITICAL

Remote Desktop Services Remote Code Execution Vulnerability in Rexroth Industrial PCs

fleetdmllm-fleetdm-7d0f13f52d2b5368CRITICAL

Remote Desktop Services Remote Code Execution Vulnerability in Rexroth Industrial PCs

amazonllm-amazon-10753c8ce486fbc4CRITICAL

Multiple Vulnerabilities in Bosch Recording Station (BRS)

dfinityllm-dfinity-d8b88e196595d034CRITICAL

Multiple Vulnerabilities in Bosch Recording Station (BRS)

fleetdmllm-fleetdm-78fd5e29116766f2CRITICAL

Multiple Vulnerabilities in Bosch Recording Station (BRS)

apollographqlllm-apollographql-16d2825ebe1162caCRITICAL

Multiple Vulnerabilities in Bosch Recording Station (BRS)

mathworksllm-mathworks-8526ba1adb63f743CRITICAL

Multiple Vulnerabilities in Bosch Recording Station (BRS)

mathworksllm-mathworks-a164b860bfebd2e5CRITICAL

Vulnerability for Windows Remote Desktop Services (RDP) Remote Code Execution

fleetdmllm-fleetdm-9a6ca3157d4c04f4CRITICAL

Vulnerability for Windows Remote Desktop Services (RDP) Remote Code Execution

amazonllm-amazon-e028c450579fc078CRITICAL

Vulnerability for Windows Remote Desktop Services (RDP) Remote Code Execution

apollographqlllm-apollographql-1e19bac54d68ff29CRITICAL

Vulnerability for Windows Remote Desktop Services (RDP) Remote Code Execution

dfinityllm-dfinity-d2ea8ace2a29054cCRITICAL

Vulnerability for Windows Remote Desktop Services (RDP) Remote Code Execution

microsoft2019-May/CVE-2019-0708Critical

Remote Desktop Services Remote Code Execution Vulnerability

References

cisa.gov / known-exploited-vulnerabilities-catalog

US Government Resource

packetstormsecurity.com / files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.html

ExploitThird Party AdvisoryVDB Entry

packetstormsecurity.com / files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.html

ExploitThird Party AdvisoryVDB Entry

packetstormsecurity.com / files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.html

ExploitThird Party AdvisoryVDB Entry

packetstormsecurity.com / files/155389/Microsoft-Windows-7-x86-BlueKeep-RDP-Use-After-Free.html

Third Party AdvisoryVDB Entry

packetstormsecurity.com / files/162960/Microsoft-RDP-Remote-Code-Execution.html

ExploitThird Party AdvisoryVDB Entry

cert-portal.siemens.com / productcert/pdf/ssa-166360.pdf

Third Party Advisory

cert-portal.siemens.com / productcert/pdf/ssa-406175.pdf

Third Party Advisory

cert-portal.siemens.com / productcert/pdf/ssa-433987.pdf

Third Party Advisory

cert-portal.siemens.com / productcert/pdf/ssa-616199.pdf

Third Party Advisory

cert-portal.siemens.com / productcert/pdf/ssa-832947.pdf

Third Party Advisory

cert-portal.siemens.com / productcert/pdf/ssa-932041.pdf

Third Party Advisory

portal.msrc.microsoft.com / en-US/security-guidance/advisory/CVE-2019-0708

PatchVendor Advisory

huawei.com / en/psirt/security-advisories/huawei-sa-20190529-01-windows-en

Third Party Advisory

huawei.com / en/psirt/security-notices/huawei-sn-20190515-01-windows-en

Third Party Advisory