Windows Remote Access Connection Manager Vulnerabilities Let Attackers Escalate Privileges

Cybersecuritynews •Abinaya • December 12, 2025

Two critical privilege escalation flaws were disclosed in the Windows Remote Access Connection Manager on December 9, 2025. The vulnerabilities, tracked as CVE-2025-62472 and CVE-2025-62474, allow authorized attackers with low-level privileges to gain SYSTEM-level access on affected systems. CVE-2025-62472 stems from the use of uninitialized resources in the Remote Access Connection Manager. Enabling privilege escalation […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Windows Remote Access Connection Manager Vulnerabilities Disclosed On December 9, 2025, two critical vulnerabilities were disclosed in the Windows Remote Access Connection Manager, identified as CVE-2025-62472 and CVE-2025-62474. These flaws allow authorized attackers with low-level privileges to escalate their access to SYSTEM-level on affected systems by exploiting uninitialized resources. Users of the affected systems are at risk of privilege escalation attacks. 4 sources 35

Extracted Entities

Windows Remote Access Connection Manager Vulnerabilities Let Attackers Escalate Privileges

The full story

Extracted Entities

Attack Types (1)

CVEs (2)

Platforms (1)