CVE-2019-1182

CVE-2019-1182 is a critical remote code execution vulnerability affecting Microsoft Windows operating systems, including Windows 7, 8.1, 10, and various Windows Server versions. An unauthenticated attacker can exploit this pre-authentication flaw by sending specially crafted RDP requests, requiring no user interaction. Successful exploitation grants the attacker arbitrary code execution, allowing them to install programs, manipulate data, or create new accounts with full user rights. While not listed in KEV or having public Metasploit/Nuclei modules, it garnered significant community discussion and media coverage, indicating high awareness. The vulnerability's high CVSS score of 9.8 and FAUCET Risk Score of 97/100 underscore its severe potential impact.