Information Disclosure Vulnerability in Windows Routing and Remote Access Service by Microsoft
CVE-2025-53796
6.5MEDIUM
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 9 September 2025
What is CVE-2025-53796?
A buffer over-read vulnerability in Windows Routing and Remote Access Service (RRAS) can be exploited by unauthorized attackers to access sensitive information over a network. This issue arises when improper handling of data allows attackers to glean information that should remain confidential, potentially impacting the security and integrity of affected systems.
Affected Version(s)
Windows Server 2008 Service Pack 2 x64-based Systems 6.0.6003.0 < 6.0.6003.23529
Windows Server 2008 R2 Service Pack 1 (Server Core installation) x64-based Systems 6.1.7601.0 < 6.1.7601.27929
Windows Server 2008 R2 Service Pack 1 x64-based Systems 6.1.7601.0 < 6.1.7601.27929