← Back

CVE-2026-25172

nvd nist
Published: Mar 10, 2026Modified: Mar 13, 2026

JSON object

Loading...
8.0
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.1 / Impact: 5.9
Source: secure@microsoft.com

Description

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

Affected (7)

6 products
Windows Server 2012
Windows Server 2016
Windows Server 2019
Windows Server 2022
Windows Server 2022 23h2
Windows Server 2025
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
All versions
Version r2
Before 10.0.14393.8957
Before 10.0.17763.8511
Before 10.0.20348.4830
Before 10.0.25398.2207
Before 10.0.26100.32463

References (1)

Timeline

No history available yet.