Windows Routing and Remote Access Service (RRAS) vulnerabilities
12 known CVE vulnerabilities in Windows Routing and Remote Access Service (RRAS), translated and rated.
- CVE-2026-96245High
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- CVE-2026-85808High
An out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-85339High
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine.
- CVE-2026-85322High
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- CVE-2026-69590Critical
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
- CVE-2023-35367Critical
A vulnerability in the Windows Routing and Remote Access Service (RRAS) allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
- CVE-2023-35366Critical
A vulnerability in the Windows Routing and Remote Access Service (RRAS) allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
- CVE-2023-35365Critical
A vulnerability in the Windows Routing and Remote Access Service (RRAS) allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
- CVE-2026-49791High
Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-20843High
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
- CVE-2025-62549High
Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- CVE-2025-62473Medium
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. The vulnerability could lead to data leakage.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

