CVE-2025-26668: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...

CVE-2025-26669: Out-of-bounds Read

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

CVE-2025-24051

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...

CVE-2025-24051 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

PT-2025-10805 · Microsoft · Windows Routing/Remote Access Service +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS versions prior to the fixed version Description: The issue is related to a heap-based buffer overflow in the Windows Routing and Remote Access Service RRAS, which allows an unauthorized attacker ...

CVE-2025-21410 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

CVE-2025-21208

CVE-2025-21208 is a Windows RRAS Remote Code Execution vulnerability. The NVD entry confirms the issue as a network‑vector RCE with high impact (CVSSv3.1: 8.8, C/H/I/A = high; AV:N, AC:L, PR:N, UI:R, S:U). The vulnerability is tied to Windows RRAS and has a documented CVE entry; exploitation/avai...

CVE-2025-21208 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

CVE-2024-49125

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2024-49102

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2024-49086

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2024-49125 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

CVE-2024-49104

The connected NCSC advisory (EUVD/NCSC) lists CVE-2024-49104 under Windows Routing and Remote Access Service (RRAS) with a high impact: Execution of arbitrary code (CVSS 8.80). The RRAS entry is described as vulnerable to arbitrary code execution, but the document does not provide root cause spec...

CVE-2024-49089

Technical details about CVE-2024-49089 are not provided in the supplied documents; RRAS RCE is referenced but no affected versions, exploit, or remediation details are included. Monitor for updates.

CVE-2024-49089 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

CVE-2024-49086 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

CVE-2024-49086 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

CVE-2024-49085 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...