Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

What type of information could be disclosed by this vulnerability?
An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
This attack requires an admin user on the client to connect to a malicious server and then take specific actions which could result in information disclosure.

According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?
This attack requires a client to connect to a malicious server, and that could allow the attacker to gain code execution on the client.

Security updates
10.0.17763.7136 — https://support.microsoft.com/help/5055519
10.0.20348.3453 — https://support.microsoft.com/help/5055526
10.0.26100.3775 — https://support.microsoft.com/help/5055523
10.0.25398.1551 — https://support.microsoft.com/help/5055527
10.0.14393.7969 — https://support.microsoft.com/help/5055521
6.0.6003.23220 — https://support.microsoft.com/help/5055609
6.0.6003.23220 — https://support.microsoft.com/help/5055596
6.1.7601.27670 — https://support.microsoft.com/help/5055561
6.1.7601.27670 — https://support.microsoft.com/help/5055570
6.2.9200.25423 — https://support.microsoft.com/help/5055581
6.3.9600.22523 — https://support.microsoft.com/help/5055557