Information Disclosure Vulnerability in Windows RRAS by Microsoft

CVE-2025-21203

Summary

An information disclosure vulnerability exists in the Windows Routing and Remote Access Service (RRAS) that could allow an unauthorized attacker to exploit a buffer over-read condition. This issue may lead to the exposure of sensitive information over a network, potentially assisting attackers in gathering insights into the system, and thereby enhancing their attack strategies. System administrators are urged to assess their configurations and implement necessary security measures as detailed in the official Microsoft advisory.

References