Microsoft Windows RRAS Information Disclosure Vulnerability

Vulnerability

A vulnerability allowing out-of-bounds read has been identified in the Windows Routing and Remote Access Service (RRAS). This issue could enable an unauthorized attacker to disclose information over the network, potentially allowing access to portions of heap memory.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure over the network.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5065425, KB5065426, KB5065427, KB5065428, KB5065507, KB5065508, KB5065509, KB5065510, KB5065511, and KB5065432.

Added: Sep 9, 2025, 6:42 PM
Updated: Sep 9, 2025, 6:42 PM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
2.5
exploitability
6.0
remediation
7.7
relevance
0.5
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.