CVE-2026-20843 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

...

PT-2026-2692

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description An issue with access control in Windows Routing and Remote Access Service RRAS could allow a local attacker to gain elevated privileges. The vulnerabili...

CVE-1999-0715

Buffer overflow in Remote Access Service RAS client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry...

Microsoft Windows Routing and Remote Access Service Remote Code Execution Vulnerability

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft USA that is used to implement features such as network routing, virtual private networks VPNs and dial-up connections. A remote code execution vulnerability exists in Microsoft Windows Routing and Remote Acces...

CVE-2025-62473

Buffer over-read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

CVE-2025-62549

Untrusted pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...

CVE-2025-62473

Buffer over-read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

CVE-2025-62473

Buffer over-read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

EUVD-2025-202204

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...

CVE-2025-62549 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Untrusted pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...

KLA90811 Multiple vulnerabilities in Microsoft Product (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, spoof user interface, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a...

PT-2025-50172

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description A flaw exists in Windows Routing and Remote Access Service RRAS that could allow an attacker to disclose information over a network. The issue is a buff...

KB5071547: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (December 2025)

The remote Windows host is missing security update 5071547 or hotpatch 5071413. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-62549 -...

CVE-2025-60713

Untrusted pointer dereference in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

CVE-2025-62452

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an authorized attacker to execute code over a network...

CVE-2025-60715

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an authorized attacker to execute code over a network...

CVE-2025-60715

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an authorized attacker to execute code over a network...

CVE-2025-60713

Untrusted pointer dereference in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

CVE-2025-60713

CVE-2025-60713 is an elevation-of-privilege flaw in Windows RRAS caused by an untrusted pointer dereference. Public docs confirm local privilege escalation for an authenticated attacker. Affected component is RRAS in Windows; CVSS v3.1 base score 7.8 (High). Remediation is provided via Microsoft’...