High · published January 13, 2026
⚡ An authorized user can elevate privileges on Windows RRAS with just the right moves! This access control flaw is a golden ticket for mischief! 🎟️ Think of it as someone sneaking into a VIP area at a concert using a borrowed wristband — they gain access to exclusive perks without the proper credentials! In the same way, an attacker could exploit this vulnerability to unlock unintended access to sensitive features. The consequences are serious! An attacker could gain elevated privileges, allowing them to change settings, access sensitive data, or even disable security measures. This could lead to a full compromise of the system, putting your entire network at risk!
Think of it as someone sneaking into a VIP area at a concert using a borrowed wristband — they gain access to exclusive perks without the proper credentials! In the same way, an attacker could exploit this vulnerability to unlock unintended access to sensitive features. This vulnerability arises from improper access control in the Windows Routing and Remote Access Service (RRAS), allowing authenticated users to perform actions they shouldn't be able to, effectively elevating their privileges.
The consequences are serious! An attacker could gain elevated privileges, allowing them to change settings, access sensitive data, or even disable security measures. This could lead to a full compromise of the system, putting your entire network at risk! To mitigate this risk, ensure that all systems are updated to the latest security patches. Regularly review user permissions to ensure the principle of least privilege is enforced. Monitor for any unauthorized access attempts to your RRAS services. You've got this! By taking these steps, you can secure your systems like a champ! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1607 | < 10.0.14393.8783 | 10.0.14393.8783 |
| microsoft/windows_10_1607 | < 10.0.14393.8783 | 10.0.14393.8783 |
| microsoft/windows_10_1809 | < 10.0.17763.8276 | 10.0.17763.8276 |
| microsoft/windows_10_1809 | < 10.0.17763.8276 | 10.0.17763.8276 |
| microsoft/windows_10_21h2 | < 10.0.19044.6809 | 10.0.19044.6809 |
| microsoft/windows_10_22h2 | < 10.0.19045.6809 | 10.0.19045.6809 |
| microsoft/windows_11_23h2 | < 10.0.22631.6491 | 10.0.22631.6491 |
| microsoft/windows_11_24h2 | < 10.0.26100.7623 | 10.0.26100.7623 |
| microsoft/windows_11_25h2 | < 10.0.26200.7623 | 10.0.26200.7623 |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2016 | < 10.0.14393.8783 | 10.0.14393.8783 |
| microsoft/windows_server_2019 | < 10.0.17763.8276 | 10.0.17763.8276 |
| microsoft/windows_server_2022 | < 10.0.20348.4648 | 10.0.20348.4648 |
| microsoft/windows_server_2022_23h2 | < 10.0.25398.2092 | 10.0.25398.2092 |
| microsoft/windows_server_2025 | < 10.0.26100.32230 | 10.0.26100.32230 |