Microsoft Windows RRAS Buffer Over-Read Vulnerability Allowing Information Disclosure

Vulnerability

A buffer over-read vulnerability has been identified in the Windows Routing and Remote Access Service (RRAS). This vulnerability allows an unauthorized attacker to disclose information over the network by reading small portions of heap memory. It affects multiple Windows Server and Windows 10 versions.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure over the network.

Remediation

Security updates are available for affected users. Instructions for downloading these updates can be found in the Microsoft Update Catalog.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
2.5
exploitability
4.4
remediation
7.7
relevance
0.0
threat
0.1
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.