Remote Desktop Protocol (RDP) pipes have a security bug that could allow any standard, unprivileged user to access other connected users machines. If exploited, lateral issues could lead to data-privacy issues and privilege escalation, researchers warned. The bug dates back at least to Windows Server 2012 R2, CyberArk said. Microsoft said that an exploit of the vulnerability would be of low complexity leading to a CVSS criticality rating of 7.7 out of 10, making it important in severity.”]
Source: https://threatpost.com/windows-bug-rdp-exploit-unprivileged-users/177599/