As of July 8, 2025, there is no record of a vulnerability identified as CVE-2025-49669 in the Windows Routing and Remote Access Service (RRAS). However, several similar vulnerabilities have been documented in RRAS:
- CVE-2025-33064: This is a heap-based buffer overflow vulnerability in Windows RRAS that allows an authenticated attacker to execute code over a network. Microsoft addressed this issue in their June 2025 Patch Tuesday updates. (nvd.nist.gov)
- CVE-2025-33066: Another heap-based buffer overflow in RRAS, this vulnerability enables an unauthenticated attacker to execute code over a network. It was also patched in the June 2025 updates. (bleepingcomputer.com)
- CVE-2025-24051: This vulnerability involves a heap-based buffer overflow in RRAS, allowing an unauthorized attacker to execute code over a network. It was addressed in the March 2025 Patch Tuesday updates. (nvd.nist.gov)
Source: MSRC Security Update Guide - Microsoft Security Response Center