Microsoft Windows RRAS Privilege Escalation Vulnerability

A vulnerability in Windows Routing and Remote Access Service (RRAS) has been identified, allowing an authorized attacker to locally elevate privileges. This issue arises from improper access control within the service.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability, which is available as part of the January 2026 Monthly Rollup. Instructions for downloading this update can be found in the Microsoft Update Catalog.