CVE-2024-38131

Name of the Vulnerable Software and Affected Versions Microsoft Remote Desktop Client versions prior to 1.2.5620

Description The vulnerability is related to the Clipboard Virtual Channel Extension in Windows operating systems, which uses insecure mechanisms for handling authentication data in the operating system's memory. This allows a remote attacker to execute arbitrary code. The issue can be exploited by remote attackers to affect the system.

Recommendations Update the Microsoft Remote Desktop Client to at least version 1.2.5620 to fix the vulnerability. As a temporary workaround, consider restricting access to the Clipboard Virtual Channel Extension until the update is applied.