Windows Remote Access Connection Manager Vulnerability Enables Arbitrary Code Execution

Cybersecuritynews •Abinaya • December 15, 2025

A critical security issue involving the Windows Remote Access Connection Manager (RasMan) that allows local attackers to execute arbitrary code with System privileges. While investigating CVE-2025-59230, the vulnerability that Microsoft addressed in the October 2025 security updates. 0patch security analysts discovered a complex exploit chain that relies on a secondary, previously unknown zero-day flaw to function […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Windows RasMan Vulnerability Allows Arbitrary Code Execution A critical vulnerability in the Windows Remote Access Connection Manager (RasMan) has been identified, allowing local attackers to execute arbitrary code with System privileges. This issue was linked to CVE-2025-59230, which Microsoft addressed in its October 2025 security updates. Security analysts discovered that the exploit relies on a secondary, previously unknown zero-day flaw. 3 sources 51

Extracted Entities

Windows Remote Access Connection Manager Vulnerability Enables Arbitrary Code Execution

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)