CVE-2025-59510 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability

Api.Msrc.Microsoft • November 11, 2025

Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service locally.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in Windows RRAS Expose Systems to Remote Code Execution and More Microsoft has identified several vulnerabilities in the Windows Routing and Remote Access Service (RRAS), including two heap-based buffer overflow vulnerabilities (CVE-2025-60715 and CVE-2025-62452) that allow authorized attackers to execute code remotely. Additionally, there is an elevation of privilege vulnerability (CVE-2025-60713) and a denial of service vulnerability (CVE-2025-59510) that could be exploited locally. These vulnerabilities affect systems utilizing RRAS, necessitating immediate attention from administrators. 4 sources 52

Extracted Entities

CVE-2025-59510 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)