#rdp

Analysis · May 20, 2026 · Colten Anderson

BlueKeep: the wormable RDP bug Microsoft patched Windows XP for

CVE-2019-0708 was a pre-authentication, wormable RCE in Windows Remote Desktop. Microsoft was scared enough of a WannaCry repeat that it shipped patches for end-of-life XP and Server 2003. The worm never fully came, but the lesson did: RDP doesn't belong on the internet.