Microsoft Windows RRAS Integer Overflow Vulnerability Leading to Remote Code Execution

A remote code execution vulnerability has been identified in the Windows Routing and Remote Access Service (RRAS) due to an integer overflow or wraparound. This vulnerability allows an unauthorized attacker to execute code over the network. It affects multiple versions of Windows Server, including 2012 R2, 2016, 2022, 2019, and 2025, as well as Windows Server 2022 23H2 Edition.

Impact

Exploitation of this vulnerability could lead to unauthorized remote code execution on the affected system.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5065507, KB5065427, KB5065426, KB5065425, KB5065432, KB5065428, and KB5065306.