CVE-2026-69590

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

EUVD-2026-73984

In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73728

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

EUVD-2026-73678

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally...

CVE-2026-72966

CVE-2026-72966 affects Windows Remote Access Connection Manager , where a missing authorization check allows an already-authorized (low-privilege) local attacker to perform tampering without user interaction. The impact is rated HIGH for integrity with no effect on confidentiality or availability...

CVE-2026-72950

CVE-2026-72950 is a Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS) , caused by a heap-based buffer overflow (per Rapid7). An unauthenticated network attacker can exploit it to gain unauthorized access to the victim's machine. NVD scores it 9.8 CRITICAL (CV...

CVE-2026-71352

CVE-2026-71352 is an integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires low privileges and no user interaction, with a CVSS 3.1 base score of 8.8 (HIGH) r...

EUVD-2026-73659

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-71342

A use-after-free flaw in Windows Remote Access Connection Manager enables a locally authenticated attacker to elevate privileges, as disclosed by Microsoft. The vulnerability is rated CVSS 3.1: 7.0 (HIGH) with a vector of local attack, high complexity, low privileges required, and no user interac...

CVE-2026-69852

CVE-2026-69852 is a Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS) , allowing a network-based attacker with low privileges to gain unauthorized access to a victim's machine. The CVSS v3.1 score is 7.5 (HIGH) with the vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/...

EUVD-2026-73459

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-69331

CVE-2026-69331 is a use-after-free vulnerability in Windows Remote Access Connection Manager that allows an authorized local attacker to elevate privileges . The vulnerability is rated HIGH (CVSS 3.1: 7.0) with a local attack vector , high complexity , and low privileges required . No user intera...

EUVD-2026-73103

Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

CVE-2026-71343

CVE-2026-71343 affects Windows Remote Access Connection Manager and is caused by a heap-based buffer overflow that allows a local, authorized attacker with low privileges to execute code. The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating full compro...

EUVD-2026-73101

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally...

EUVD-2026-72979

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-69455

CVE-2026-69455 is a heap-based buffer overflow in Windows Remote Access Connection Manager that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low complexity, and low required privileges, resulting in high impact ...

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

Windows Remote Access Connection Manager Tampering Vulnerability

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally...

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...