Skip to content
ThreatCluster

Multiple Vulnerabilities in Windows RRAS Expose Systems to Remote Code Execution and More

First seen 12 Nov 2025, 21:25 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

Microsoft has identified several vulnerabilities in the Windows Routing and Remote Access Service (RRAS), including two heap-based buffer overflow vulnerabilities (CVE-2025-60715 and CVE-2025-62452) that allow authorized attackers to execute code remotely. Additionally, there is an elevation of privilege vulnerability (CVE-2025-60713) and a denial of service vulnerability (CVE-2025-59510) that could be exploited locally. These vulnerabilities affect systems utilizing RRAS, necessitating immediate attention from administrators.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 229d ago How this analysis works

More articles in this cluster (4)

Following this threat?

Track CVE-2025-59510 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed