High · published December 9, 2025
⚡ An untrusted pointer dereference in Windows RRAS could let attackers pull some sneaky moves over your network! 🔥 Think of RRAS as a traffic cop directing data through the streets of your network. If the cop can’t tell which cars are authorized, they might let in just about anyone, ignoring a few stop signs along the way! This vulnerability could allow an unauthorized attacker to execute code remotely, essentially giving them the keys to your network's backdoor. Imagine the chaos if an intruder starts hijacking traffic, manipulating data or even taking control of critical systems — that's a recipe for disaster!
Think of RRAS as a traffic cop directing data through the streets of your network. If the cop can’t tell which cars are authorized, they might let in just about anyone, ignoring a few stop signs along the way! This CVE stems from an untrusted pointer dereference in Windows' Routing and Remote Access Service, which can be exploited to execute arbitrary code on the server, leaving it vulnerable to various malicious activities.
This vulnerability could allow an unauthorized attacker to execute code remotely, essentially giving them the keys to your network's backdoor. Imagine the chaos if an intruder starts hijacking traffic, manipulating data or even taking control of critical systems — that's a recipe for disaster! To mitigate this risk, patch your Windows systems immediately to the latest version provided by Microsoft. Also, consider restricting access to RRAS services and monitoring network traffic for any suspicious activity. Your proactive measures will help fortify your defenses! You've got this! Keep your systems updated, and soon enough, you'll have this situation under control. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1607 | < 10.0.14393.8688 | 10.0.14393.8688 |
| microsoft/windows_10_1607 | < 10.0.14393.8688 | 10.0.14393.8688 |
| microsoft/windows_10_1809 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_10_1809 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_10_21h2 | < 10.0.19044.6691 | 10.0.19044.6691 |
| microsoft/windows_10_22h2 | < 10.0.19045.6691 | 10.0.19045.6691 |
| microsoft/windows_11_23h2 | < 10.0.22631.6345 | 10.0.22631.6345 |
| microsoft/windows_11_24h2 | < 10.0.26100.7392 | 10.0.26100.7392 |
| microsoft/windows_11_25h2 | < 10.0.26200.7392 | 10.0.26200.7392 |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2016 | < 10.0.14393.8688 | 10.0.14393.8688 |
| microsoft/windows_server_2019 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_server_2022 | < 10.0.20348.4467 | 10.0.20348.4467 |
| microsoft/windows_server_2022_23h2 | < 10.0.25398.2025 | 10.0.25398.2025 |
| microsoft/windows_server_2025 | < 10.0.26100.7392 | 10.0.26100.7392 |