CVE-2026-87698

A Windows Remote Access Service Infrastructure component is vulnerable to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure on the affected system. The CVSS 3.1 score is 5.5, reflecting a medium severity with a local attack vector a...

CVE-2026-96316

The Windows Routing and Remote Access Service (RRAS) is affected by an improper access control vulnerability (CWE-862). This flaw allows an authorized attacker to perform tampering locally on the system. The vulnerability is categorized with a Medium severity, specifically impacting integrity. Wh...

CVE-2026-96245

An out-of-bounds read vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to disclose information over a network. While the root cause is identified as an out-of-bounds read (CWE-125), the specific component or file is not speci...

CVE-2026-70137

A vulnerability in Windows Remote Access Connection Manager involves improper access control , which allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high impact on confidentiality. No specific exploit details or versions are pr...

CVE-2026-85867

A heap-based buffer overflow exists in the Windows Remote Access Connection Manager . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or remediation versions are provided in the documentation.

CVE-2026-85808

An out-of-bounds read vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to perform a denial of service (DoS) over a network. The vulnerability has been assigned a high severity (CVSS 7.5) and an official fix is available throu...

CVE-2026-85809

A Remote Code Execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw, identified as a Heap-based Buffer Overflow (CWE-122) , allows an attacker to gain unauthorized access to a victim's machine. The vulnerability is rated as CRITICAL with a CVSS v3.1 sc...

CVE-2026-85794

An out-of-bounds read vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. No specific exploit details or proof-of-concept code are provided in the doc...

CVE-2026-85792

A Remote Code Execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an attacker to gain unauthorized access to a victim's machine. The vulnerability is associated with CWE-416 (Use After Free) and has a CVSS score of 9.8 . Exploitation can occur...

CVE-2026-85339

A Remote Code Execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw is caused by an Integer Underflow (CWE-191) and a Heap-based Buffer Overflow (CWE-122), which could allow an attacker to gain unauthorized access to a victim's machine. The vulnerabili...

CVE-2026-85322

A use of uninitialized resource vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (High) . No specific exploit details o...

CVE-2026-84020

A Use after free vulnerability in the Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability. Exploitation details are not provided in the documents.

CVE-2026-84017

A Null pointer dereference vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to perform a Denial of Service (DoS) attack over the network. The vulnerability is characterized by a CVSS 3.1 base score of 7.5 with High availabili...

CVE-2026-84015

A heap-based buffer overflow exists in the Remote Access Point-to-Point Protocol (PPP) EAP-TLS component within Microsoft Windows . This vulnerability allows an unauthorized attacker to execute arbitrary code over a network. The impact is rated as CRITICAL with a CVSS score of 9.80 . No specific ...

CVE-2026-70057

The Windows Routing and Remote Access Service (RRAS) is impacted by an incorrect authorization vulnerability (CWE-863). This flaw allows an authorized attacker to bypass a security feature through local access . The vulnerability carries a MEDIUM base severity (CVSS 3.1 score of 5.5), specificall...

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

Use after free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to deny service over a network...

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an authorized attacker to disclose information locally...

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...