CVE-2025-32710

HIGH

Windows Server RCE via Use-After-Free in Remote Desktop Services

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-32710. PoCs published by Sincan2.

AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2025-32710, targeting Windows Remote Desktop Services to achieve remote code execution. It includes automated scanning, exploitation, and verification capabilities.

Description

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

Exploits (1)

nomisec WORKING POC 6 stars
by Sincan2 · poc
https://github.com/Sincan2/RCE-CVE-2025-32710

This repository contains a proof-of-concept exploit for CVE-2025-32710, targeting Windows Remote Desktop Services to achieve remote code execution. It includes automated scanning, exploitation, and verification capabilities.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Windows Remote Desktop Services
No auth needed
Prerequisites: Python 3 · Nmap · FreeRDP · Network access to target RDP services
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References

Scores

CVSS v3 8.1
EPSS 0.0095
EPSS Percentile 56.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-362 CWE-416
Status published
Products (9)
microsoft/windows_server_2008 (2 CPE variants)
microsoft/windows_server_2008 r2 sp1
microsoft/windows_server_2012
microsoft/windows_server_2012 r2
microsoft/windows_server_2016 < 10.0.14393.8066
microsoft/windows_server_2019 < 10.0.17763.7314
microsoft/windows_server_2022 < 10.0.20348.3630
microsoft/windows_server_2022_23h2 < 10.0.25398.1611
microsoft/windows_server_2025 < 10.0.26100.3981
Published Jun 10, 2025
Tracked Since Feb 18, 2026