Microsoft has fixed an RDP vulnerability that can be exploited remotely, without authentication and used to run arbitrary code.