جزئیات آسیب‌پذیری

CVE-2025-55340

Microsoft Windows 10Microsoft Windows 11Microsoft Windows Server

Windows Remote Desktop Protocol Security Feature Bypass

CVSS 3.1

7.0بالا

Improper authentication in Windows Remote Desktop Protocol allows an authorized attacker to bypass a security feature locally.

امتیاز	نسخه	منبع	بردار
7.0بالا	3.1	CVEProject cvelistV5 (CNA) (microsoft)	`CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C`

فروشنده	محصول	نسخه‌ها	منبع
Microsoft	Windows 10 Version 21H2	10.0.19044.0 ≤ v < 10.0.19044.6456	CVEProject cvelistV5 (CNA)
Microsoft	Windows 10 Version 22H2	10.0.19045.0 ≤ v < 10.0.19045.6456	CVEProject cvelistV5 (CNA)
Microsoft	Windows 11 Version 24H2	10.0.26100.0 ≤ v < 10.0.26100.6899	CVEProject cvelistV5 (CNA)
Microsoft	Windows 11 Version 25H2	10.0.26200.0 ≤ v < 10.0.26200.6899	CVEProject cvelistV5 (CNA)
Microsoft	Windows 11 version 22H2	10.0.22621.0 ≤ v < 10.0.22621.6060	CVEProject cvelistV5 (CNA)
Microsoft	Windows 11 version 22H3	10.0.22631.0 ≤ v < 10.0.22631.6060	CVEProject cvelistV5 (CNA)
Microsoft	Windows 11 version 23H2	10.0.22631.0 ≤ v < 10.0.22631.6060	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2022	10.0.20348.0 ≤ v < 10.0.20348.4294	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	10.0.25398.0 ≤ v < 10.0.25398.1913	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2025	10.0.26100.0 ≤ v < 10.0.26100.6899	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2025 (Server Core installation)	10.0.26100.0 ≤ v < 10.0.26100.6899	CVEProject cvelistV5 (CNA)

۰٫۳۱٪

احتمال بهره‌برداری در ۳۰ روز

۲۴٫۵٪

صدک (نسبت به همه‌ی CVEها)