# Vulnerabilities

- **URL:** https://hackindex.io/services/rdp/exploitation/vulnerabilities
- **Path:** RDP > Exploitation
- **Up:** [Exploitation](https://hackindex.io/services/rdp/exploitation.md)
- **Published:** 2026-03-11
- **Updated:** 2026-03-29

## Steps

- [BlueKeep CVE-2019-0708 – Unauthenticated RDP RCE](https://hackindex.io/services/rdp/exploitation/vulnerabilities/bluekeep-cve-2019-0708.md): Exploits CVE-2019-0708, an unauthenticated RCE vulnerability in Windows RDP via kernel UAF, enabling pre-auth SYSTEM-level code execution without user interaction.
- [DejaBlue CVE-2019-1181 – RDP RCE on Modern Windows](https://hackindex.io/services/rdp/exploitation/vulnerabilities/dejablue-cve-2019-1181.md): Exploits CVE-2019-1181 pre-auth RDP RCE via heap overflow in MS-RDPBCGR on Windows 8.1/10/Server 2012-2019 without requiring credentials.