Microsoft Windows RRAS Information Disclosure Vulnerability

A vulnerability allowing out-of-bounds read has been identified in the Windows Routing and Remote Access Service (RRAS). This issue could enable an unauthorized attacker to disclose information over the network. The vulnerability affects multiple Windows Server and client versions, including Windows Server 2008, Windows Server 2016, Windows 10 (various versions), Windows 11 (various versions), and Windows Server 2022.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure, allowing an attacker to read portions of heap memory over the network.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates are available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5058411, KB5058405, KB5058383, KB5058430, KB5058403, and KB5058451.