CVE-2026-25172
CVSS 8 HIGH: integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to… EPSS 0.9% (61st percentile). Microsoft patch: 5079466.
Patch available KB5079466 Download →
Vulnerabilities · 230 days ago
It fixes three RRAS vulnerabilities (CVE-2026-25172, CVE-2026-25173, CVE-2026-26111) that can allow remote code execution when connecting to a malicious server.
CVSS 8 HIGH: integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to… EPSS 0.9% (61st percentile). Microsoft patch: 5079466.
Patch available KB5079466 Download →
CVSS 8 HIGH: integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to… EPSS 0.9% (61st percentile). Microsoft patch: 5079466.
Patch available KB5079466 Download →
CVSS 8 HIGH: integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to… EPSS 0.9% (59th percentile). Microsoft patch: 5078752.
Patch available KB5078752 Download →
1 source covering this story
Microsoft releases Windows 11 OOB hotpatch to fix RRAS RCE flaw
Microsoft has released an out-of-band (OOB) update to fix a security vulnerabilities affecting Windows 11 Enterprise devices that receive hotpatch updates instead of the regular Patch Tuesday cumulative updates.
Part of the PlainSec briefing for 2026-03-15