Microsoft Windows RRAS Buffer Over-Read Vulnerability Allowing Information Disclosure

A buffer over-read vulnerability has been identified in the Windows Routing and Remote Access Service (RRAS). This vulnerability allows an unauthorized attacker to disclose information over the network by exploiting the buffer over-read condition, which can potentially lead to reading portions of heap memory.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure over the network.

Remediation

Users can apply the security update KB5071544 to address this vulnerability. This security update is available through the Microsoft Update Catalog.