Microsoft Windows RRAS Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in the Windows Routing and Remote Access Service (RRAS). This issue arises from an untrusted pointer dereference, allowing an unauthorized attacker to execute code over the network. The vulnerability affects multiple Windows Server versions, as well as Windows 10 and Windows 11.

Impact

Exploitation of this vulnerability could lead to unauthorized remote code execution on the affected system.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5071546, KB5071544, KB5072033, KB5072014, KB5071501, KB5071505, KB5071503, KB5071542, KB5071417, and KB5071543.