Heap-Based Buffer Overflow in Windows Routing and Remote Access Service by Microsoft
CVE-2025-64678
8.8HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 9 December 2025
What is CVE-2025-64678?
A heap-based buffer overflow vulnerability exists in the Windows Routing and Remote Access Service (RRAS). This flaw can be exploited by an unauthorized attacker to execute arbitrary code over a network, potentially leading to a full system compromise. Proper mitigation steps must be employed to prevent exploitation of this vulnerability, safeguarding system integrity and data security. For more detailed guidance and further information, please refer to the official Microsoft advisory.
Affected Version(s)
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.8594
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.8027
Windows 10 Version 21H2 32-bit Systems 10.0.19044.0 < 10.0.19043.6575