580 matches found
CVE-2026-96316
Improper access control in Windows Routing and Remote Access Service RRAS allows an authorized attacker to perform tampering locally...
CVE-2026-96245
Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...
CVE-2026-85808
Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to deny service over a network...
CVE-2026-85809
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
CVE-2026-85792
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
CVE-2026-85794
Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an authorized attacker to disclose information locally...
CVE-2026-85339
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
CVE-2026-85322
Use of uninitialized resource in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...
CVE-2026-84017
Null pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to deny service over a network...
CVE-2026-84020
Use after free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...
CVE-2026-70158
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
CVE-2026-70057
Incorrect authorization in Windows Routing and Remote Access Service RRAS allows an authorized attacker to bypass a security feature locally...
CVE-2026-103558
Deadlock in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to deny service over a network...
CVE-2026-103558
A deadlock vulnerability (CWE-833) exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to cause a denial of service (DoS) over the network. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a high severity impact on availability....
CVE-2026-70158
The Windows Routing and Remote Access Service (RRAS) is vulnerable to Remote Code Execution (RCE) . This vulnerability is caused by a Double Free (CWE-415) condition, which could allow an attacker to gain unauthorized access to a victim's machine. The issue is rated as High severity with a CVSS 3...
CVE-2026-96316
The Windows Routing and Remote Access Service (RRAS) is affected by an improper access control vulnerability (CWE-862). This flaw allows an authorized attacker to perform tampering locally on the system. The vulnerability is categorized with a Medium severity, specifically impacting integrity. Wh...
CVE-2026-96245
An out-of-bounds read vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to disclose information over a network. While the root cause is identified as an out-of-bounds read (CWE-125), the specific component or file is not speci...
CVE-2026-85809
A Remote Code Execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw, identified as a Heap-based Buffer Overflow (CWE-122) , allows an attacker to gain unauthorized access to a victim's machine. The vulnerability is rated as CRITICAL with a CVSS v3.1 sc...
CVE-2026-85808
An out-of-bounds read vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to perform a denial of service (DoS) over a network. The vulnerability has been assigned a high severity (CVSS 7.5) and an official fix is available throu...
CVE-2026-85794
An out-of-bounds read vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. No specific exploit details or proof-of-concept code are provided in the doc...