Microsoft Windows RRAS Information Disclosure Vulnerability

A vulnerability allowing out-of-bounds read has been identified in the Windows Routing and Remote Access Service (RRAS). This issue allows an unauthorized attacker to disclose information over the network. The vulnerability affects several versions of Windows Server, including 2012 R2, 2008 R2, 2016, 2022, and 2019, as well as Windows Server 2025.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure, allowing attackers to read portions of heap memory over the network.

Remediation

Users can apply the security updates provided by Microsoft for this vulnerability. These security updates are available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles referenced in the vulnerability announcement.