CVE-2025-64678CWE-122

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

High · published December 9, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
63.4
In the wild
Unconfirmed
What it is

⚡ A heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) is like leaving a door wide open for an intruder to stroll in and take control of your network! Think of RRAS as a hotel lobby that should only allow guests with proper reservations. If an intruder finds a way to overflow the system's memory, it’s like letting someone with a fake ID check into a suite and take over the front desk. An unauthorized attacker can exploit this vulnerability to execute arbitrary code over the network, leading to full system compromise. They could potentially take control of sensitive data, disrupt services, or even pivot deeper into the network, which could be absolutely devastating for any organization!

Put simply

Think of RRAS as a hotel lobby that should only allow guests with proper reservations. If an intruder finds a way to overflow the system's memory, it’s like letting someone with a fake ID check into a suite and take over the front desk. This vulnerability arises from improper handling of memory in RRAS, allowing attackers to manipulate the heap and execute malicious code remotely, providing unauthorized access to the network.

What to do

An unauthorized attacker can exploit this vulnerability to execute arbitrary code over the network, leading to full system compromise. They could potentially take control of sensitive data, disrupt services, or even pivot deeper into the network, which could be absolutely devastating for any organization! To secure your systems, ensure you apply the latest patches from Microsoft immediately. Additionally, review your network access controls to mitigate any potential risks while waiting for the update. It's crucial not to overlook any configurations that could expose your systems! You've got this! By taking these steps, you’ll strengthen your defenses and keep your network safe. 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.01032 · 63.4th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2025-12-09T17:56Z
EPSS history
Timeline
  • 09 DEC 17:56Z
    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
    cvelistv5