Windows Remote Desktop Services Flaw Allows Network-Based Denial-of-Service Attacks

Microsoft disclosed a critical vulnerability in Windows Remote Desktop Services on August 12, 2025, that enables attackers to launch denial-of-service attacks remotely without requiring authentication or user interaction.

The flaw, tracked as CVE-2025-53722, has been assigned an “Important” severity rating with a CVSS score of 7.5 out of 10.

Vulnerability Details and Attack Vector

The security flaw stems from uncontrolled resource consumption within Windows Remote Desktop Services, classified under CWE-400 weakness category.

What makes this vulnerability particularly concerning is its low attack complexity combined with network-based exploitation capabilities.

Attackers can target vulnerable systems remotely without needing any privileges on the target machine or requiring victims to perform specific actions.

The vulnerability allows unauthorized attackers to overwhelm Remote Desktop Services by consuming system resources, effectively rendering the service unavailable to legitimate users.

This type ...