Microsoft Windows RRAS Integer Overflow Vulnerability Leading to Remote Code Execution

An integer overflow vulnerability has been identified in the Routing and Remote Access Service (RRAS) of Microsoft Windows. This vulnerability allows an unauthorized attacker to execute code remotely over the network. The issue arises from an integer overflow or wraparound, which can be exploited by tricking a domain-joined user into sending a request to a malicious server via the RRAS Snap-in. The server could then return harmful data that might enable arbitrary code execution on the user's system.

Impact

Exploitation of this vulnerability could lead to remote code execution on the affected system.

Remediation

Users can apply the security update for this vulnerability, which is included in the March 2026 Monthly Rollup, available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5078774, KB5078775, KB5078938, KB5078740, KB5078736, KB5078734, KB5078766, KB5078752, and KB5078737.