Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Are the updates for Windows 10 for x64-based Systems and Windows 10 for 32-bit Systems currently available?
Yes. As of April 9, 2025, the security update (5055547) for Windows 10 for x64-based Systems and Windows 10 for 32-bit Systems are available. Customers running Windows 10 should ensure the update is installed to be protected from this vulnerability.

What type of information could be disclosed by this vulnerability?
An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.

According to the CVSS metric, user interaction is required (UI:R) and privileges required are none (PR:N). What does that mean for this vulnerability?
An unauthorized attacker must wait for a user to initiate a connection.

Security updates
10.0.17763.7136 — https://support.microsoft.com/help/5055519
10.0.20348.3453 — https://support.microsoft.com/help/5055526
10.0.19044.5737 — https://support.microsoft.com/help/5055518
10.0.22621.5189 — https://support.microsoft.com/help/5055528
10.0.26100.3775 — https://support.microsoft.com/help/5055523
10.0.25398.1551 — https://support.microsoft.com/help/5055527
10.0.10240.20978 — https://support.microsoft.com/help/5055547
10.0.14393.7969 — https://support.microsoft.com/help/5055521
6.0.6003.23220 — https://support.microsoft.com/help/5055609
6.0.6003.23220 — https://support.microsoft.com/help/5055596
6.1.7601.27670 — https://support.microsoft.com/help/5055561
6.1.7601.27670 — https://support.microsoft.com/help/5055570
6.2.9200.25423 — https://support.microsoft.com/help/5055581
6.3.9600.22523 — https://support.microsoft.com/help/5055557