Skip to content
OpenAdvisories
High MSRC-CVE-2025-29836 1 CVE

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Published May 13, 2025 · Updated May 13, 2025

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

Details

According to the CVSS metric, user interaction is required (UI:R) and privileges required are none (PR:N). What does that mean for this vulnerability?
An unauthorized attacker must wait for a user to initiate a connection.

What type of information could be disclosed by this vulnerability?
An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.

Security updates
10.0.17763.7314 — https://support.microsoft.com/help/5058392
10.0.20348.3692 — https://support.microsoft.com/help/5058385
10.0.20348.3630 — https://support.microsoft.com/help/5058500
10.0.19044.5854 — https://support.microsoft.com/help/5058379
10.0.22621.5335 — https://support.microsoft.com/help/5058405
10.0.26100.4061 — https://support.microsoft.com/help/5058411
10.0.26100.3981 — https://support.microsoft.com/help/5058497
10.0.25398.1611 — https://support.microsoft.com/help/5058384
10.0.10240.21014 — https://support.microsoft.com/help/5058387
10.0.14393.8066 — https://support.microsoft.com/help/5058383
6.0.6003.23279 — https://support.microsoft.com/help/5058449
6.0.6003.23279 — https://support.microsoft.com/help/5058429
6.1.7601.27729 — https://support.microsoft.com/help/5058430
6.1.7601.27729 — https://support.microsoft.com/help/5058454
6.2.9200.25475 — https://support.microsoft.com/help/5058451
6.3.9600.22577 — https://support.microsoft.com/help/5058403

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References