CVE-2025-29959 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

...

KB5058385: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (May 2025)

The remote Windows host is missing security update 5058385 or Hot Patch 5058500. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of...

KB5058411: Windows 11 Version 24H2 / Windows Server 2025 Security Update (May 2025)

The remote Windows host is missing security update 5058411 or Hot Patch 5058497. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of...

KB5058383: Windows 10 Version 1607 / Windows Server 2016 Security Update (May 2025)

The remote Windows host is missing security update 5058383. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of uninitialized resource in Windo...

KB5058384: Windows Server version 23H2 Security Update (May 2025)

The remote Windows host is missing security update 5058384. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of uninitialized resource in Windo...

KB5058454: Windows Server 2008 R2 Security Update (May 2025)

The remote Windows host is missing security update 5058454. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of uninitialized resource in Windo...

CVE-2025-26664

Buffer over-read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

CVE-2025-26676

Buffer over-read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

CVE-2025-26668

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...

CVE-2025-26676

Buffer over-read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

CVE-2025-26672

Buffer over-read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

CVE-2025-26676 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

...

CVE-2025-26676

CVE-2025-26676 is a Windows RRAS vulnerability described as a buffer over-read that allows an unauthenticated, network-connected attacker to disclose application/network data. The affected component is Windows Routing and Remote Access Service; root cause is a memory over-read in RRAS processing,...

CVE-2025-26672 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

...

CVE-2025-21203 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

...

CVE-2025-21203 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

...

CVE-2025-21203

CVE-2025-21203 affects Windows Routing and Remote Access Service (RRAS). The connected data confirms a network-accessible vulnerability in RRAS that can cause an information disclosure via a buffer over-read. Affected component: RRAS on Windows; root cause: buffer over-read; impact: confidential ...

CVE-2025-27474 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

...

CVE-2025-26667 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

...

CVE-2025-26667

CVE-2025-26667 is a Windows RRAS information-disclosure vulnerability. The RRAS service can expose sensitive data to an unauthorized network actor, with the CVSSv3.1 base score listed as 6.5 (Network, Low attack complexity, Privileges None, No user interaction; Confidentiality impact High). The c...