Multiple Vulnerabilities in Windows RRAS Allow Remote Code Execution and Information Disclosure

First seen 9 Dec 2025, 18:45 UTC • Api.Msrc.Microsoft

•58

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Three vulnerabilities have been identified in the Windows Routing and Remote Access Service (RRAS). CVE-2025-62549 and CVE-2025-64678 allow unauthorized remote code execution, while CVE-2025-62473 enables information disclosure. These vulnerabilities affect systems utilizing RRAS, potentially exposing them to attacks over a network.

How this analysis works

Attack Flow

Continue Reading

Google Addresses Eighth Chrome Zero-Day Vulnerability in 2025 China-linked Cyber Group Expands Targeting to Southeastern Europe China-Nexus APT UAT-7290 Targets South Asia Telecoms in Cyber Espionage Campaign China-linked UAT-7290 Targets Telcos in Cyberespionage Campaign UAT-7290 Cyber Espionage Targets South Asian Telecoms APT28 Exploits MSHTML Zero-Day Vulnerability in Windows

Multiple Vulnerabilities in Windows RRAS Allow Remote Code Execution and Information Disclosure

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading