Microsoft’s Security Response Center lists CVE-2025-54095 as an out-of-bounds read in the Windows Routing and Remote Access Service (RRAS) that can disclose memory contents to a remote attacker over the network.
Background / Overview
Routing and Remote Access Service (RRAS) is a long‑standing...
Title: CVE-2025-50162 — RRAS Heap-Based Buffer Overflow: What Windows admins need to know (deep-dive, triage & hardening guide)
Summary (TL;DR)
A heap-based buffer overflow has been disclosed in Microsoft’s Routing and Remote Access Service (RRAS) allowing remote code execution on affected...