Microsoft released fixes today that include fixes for wormable RCE vulnerabilities Remote Desktop Services (RDS), affecting all in-support versions of Windows (i.e from Windows 7 through to Windows 10, including server versions). More details here.https://msrc-blog.microsoft.com/2019/08/13/patch-new-wormable-vulnerabilities-in-remote-desktop-services-cve-2019-1181-1182/ …
Yes. But these can be activated in multiple ways, so it's best to check in Services if it's enabled before assuming it isn't.