CVE-2006-4465: Microsoft Terminal Server, when running an application session with the "Start program at logon" and "Overr...

Security readout for executives and security teams

This CVE concerns a legacy Microsoft Terminal Server configuration where published application sessions may not contain users as expected. A local Terminal Server user could potentially escape the intended application-only experience and run other code. The source bundle does not identify affected versions, a Microsoft patch, or confirmed active exploitation. Exposure appears limited to legacy Microsoft Terminal Server environments that used application sessions as a restriction mechanism with the named options enabled. The bundle does not provide CPEs, affected versions, or product editions. Prioritize review where Terminal Server was used for kiosk-style or application-only access. This is not presented as internet-scale emergency activity, but it can undermine business assumptions about user containment in legacy remote access environments. Mitigation focus: Check Microsoft and environment-specific guidance for supported Terminal Server configurations.; Do not treat application launch settings as a security boundary.; Restrict Terminal Server access to authorized, trusted users..

Prepared

Jun 29, 2026, 10:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.