Bleepingcomputer

Windows RasMan Zero-Day Vulnerability Exploited with Unofficial Patches

First seen 12 Dec 2025, 12:53 UTC • Blog.0Patch

•75.3

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A new zero-day vulnerability in Windows' Remote Access Connection Manager (RasMan) has been identified, allowing attackers to crash the service. Unofficial patches have been released by ACROS Security to mitigate this denial-of-service (DoS) flaw. The vulnerability is linked to CVE-2025-59230, which was patched by Microsoft in October 2025.

How this analysis works

Attack Flow

Continue Reading

Google Addresses Eighth Chrome Zero-Day Vulnerability in 2025 China-linked Cyber Group Expands Targeting to Southeastern Europe China-Nexus APT UAT-7290 Targets South Asia Telecoms in Cyber Espionage Campaign China-linked UAT-7290 Targets Telcos in Cyberespionage Campaign UAT-7290 Cyber Espionage Targets South Asian Telecoms APT28 Exploits MSHTML Zero-Day Vulnerability in Windows

Windows RasMan Zero-Day Vulnerability Exploited with Unofficial Patches

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading