CVE-2026-96316

Improper access control in Windows Routing and Remote Access Service RRAS allows an authorized attacker to perform tampering locally...

CVE-2026-96245

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

CVE-2026-85809

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

CVE-2026-85808

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to deny service over a network...

CVE-2026-85794

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an authorized attacker to disclose information locally...

CVE-2026-85792

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

CVE-2026-85339

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

CVE-2026-103558

A deadlock vulnerability (CWE-833) exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to cause a denial of service (DoS) over the network. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a high severity impact on availability....

CVE-2026-70158

The Windows Routing and Remote Access Service (RRAS) is vulnerable to Remote Code Execution (RCE) . This vulnerability is caused by a Double Free (CWE-415) condition, which could allow an attacker to gain unauthorized access to a victim's machine. The issue is rated as High severity with a CVSS 3...

CVE-2026-96316

The Windows Routing and Remote Access Service (RRAS) is affected by an improper access control vulnerability (CWE-862). This flaw allows an authorized attacker to perform tampering locally on the system. The vulnerability is categorized with a Medium severity, specifically impacting integrity. Wh...

CVE-2026-96245

An out-of-bounds read vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to disclose information over a network. While the root cause is identified as an out-of-bounds read (CWE-125), the specific component or file is not speci...

CVE-2026-85809

A Remote Code Execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw, identified as a Heap-based Buffer Overflow (CWE-122) , allows an attacker to gain unauthorized access to a victim's machine. The vulnerability is rated as CRITICAL with a CVSS v3.1 sc...

CVE-2026-85808

An out-of-bounds read vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to perform a denial of service (DoS) over a network. The vulnerability has been assigned a high severity (CVSS 7.5) and an official fix is available throu...

CVE-2026-85794

An out-of-bounds read vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. No specific exploit details or proof-of-concept code are provided in the doc...

CVE-2026-85792

A Remote Code Execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an attacker to gain unauthorized access to a victim's machine. The vulnerability is associated with CWE-416 (Use After Free) and has a CVSS score of 9.8 . Exploitation can occur...

CVE-2026-85339

A Remote Code Execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw is caused by an Integer Underflow (CWE-191) and a Heap-based Buffer Overflow (CWE-122), which could allow an attacker to gain unauthorized access to a victim's machine. The vulnerabili...

CVE-2026-85322

A use of uninitialized resource vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (High) . No specific exploit details o...

CVE-2026-84020

A Use after free vulnerability in the Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability. Exploitation details are not provided in the documents.

CVE-2026-84017

A Null pointer dereference vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to perform a Denial of Service (DoS) attack over the network. The vulnerability is characterized by a CVSS 3.1 base score of 7.5 with High availabili...

CVE-2026-70057

The Windows Routing and Remote Access Service (RRAS) is impacted by an incorrect authorization vulnerability (CWE-863). This flaw allows an authorized attacker to bypass a security feature through local access . The vulnerability carries a MEDIUM base severity (CVSS 3.1 score of 5.5), specificall...