cve 2025 55700

CVE-2025-55700 is a security vulnerability in the Windows Routing and Remote Access Service (RRAS) that leads to information disclosure through an out-of-bounds read. This flaw allows a remote attacker to access unintended memory contents from an affected system, potentially exposing sensitive data. The vulnerability is particularly critical for internet-facing and DMZ RRAS hosts, which should be prioritized for inventory, hardening, and patching. Administrators are advised to apply Microsoft's security update and review their RRAS configurations to mitigate the risk of network-accessible information disclosure. This CVE affects Windows Server environments where RRAS is enabled.