Microsoft Windows RRAS Buffer Over-Read Vulnerability Allowing Information Disclosure

A buffer over-read vulnerability has been identified in the Windows Routing and Remote Access Service (RRAS). This vulnerability allows an unauthorized attacker to disclose information over the network by exploiting the buffer over-read condition, which could potentially lead to reading portions of heap memory.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure over the network.

Remediation

Users can apply the security update for this vulnerability, which is included in the September 2025 Monthly Rollup, available through the Microsoft Update Catalog. Specific knowledge base articles for the update are also accessible.