ctrlINT What the industry said about every indicator, with the quote

CVE-2019-0708Vulnerability

Microsoft Remote Desktop Services Remote Code Execution Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 4 independent sources · first reported by GreyNoise · last reported

Last reported 10 days ago

CISA KEVAdded 3 Nov 2021
Fix due 3 May 2022
Used by ransomware: knownCISA KEV catalogue
EPSS100.0%
higher than 99% of CVEsFIRST EPSS, as of 26 Sep 2026

What the reports say

4 reports, newest first · the exact sentence from each

  1. “CVE-2019-0708, a critical unauthenticated RCE in Microsoft Remote Desktop Services”

    CybleVendor
    The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws

  2. “CVE-2019-0708”

    Recorded FutureVendor
    September 2026 CVE Landscape

  3. “In one incident, they exploited a well-known RDP implementation vulnerability, CVE-2019-0708 (BlueKeep).”

    Kaspersky SecurelistVendor
    NightEagle targets Russian companies

  4. “Global exploitation event — BlueKeep (CVE-2019-0708): In 2019, a critical flaw in Windows Remote Desktop Services — the service behind RDP — was broadly scanned and then exploited in the wild (e.g., cryptominer campaigns).”

    GreyNoiseVendor
    Nearly 2,000 Malicious IPs Probe Microsoft Remote Desktop After Single-Day Surge

Indicators reported together

named in the same reports

Also named with it: CVE-2026-60137, CVE-2026-63030, CVE-2026-60004, CVE-2019-12255, CVE-2019-12260, CVE-2019-12261, CVE-2019-12263, CVE-2022-0847, CVE-2026-35273, CVE-2023-46604, CVE-2026-85046, CVE-2026-85880, CVE-2026-87491, CVE-2026-48710, CVE-2025-39964, CVE-2025-3248, CVE-2026-20316, CVE-2026-39987, CVE-2021-29441, CVE-2026-81963

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2019-0708 here?
No account needed. We do not store your IP address.