Vulnerabilità · 199 giorni fa

Hotpatch Windows 11 Enterprise Risolve RCE in RRAS

Le falle (CVE-2026-25172, CVE-2026-25173, CVE-2026-26111) possono consentire RCE quando un client si connette a un server malevolo.

CVE-2026-25172

NVD KEV

CVSS 8 HIGH: integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to… EPSS 0.9% (55º percentile), in aumento rispetto a 0.05%. Patch Microsoft: 5079466.

Patch disponibile KB5079466 Scarica →

CVE-2026-25173

NVD KEV

CVSS 8 HIGH: integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to… EPSS 0.9% (54º percentile), in aumento rispetto a 0.05%. Patch Microsoft: 5079466.

Patch disponibile KB5079466 Scarica →

CVE-2026-26111

NVD KEV

CVSS 8 HIGH: integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to… EPSS 0.8% (54º percentile). Patch Microsoft: 5078752.

Patch disponibile KB5078752 Scarica →

Cronologia

Fonti

1 fonte che coprono questa storia

Entità

Riepilogo fornitore: Microsoft

Part of the PlainSec briefing for 2026-03-15

Editions

Storie correlate