CVE-2026-25172
Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
Published Mar 10, 2026 · updated Jun 17, 2026 · microsoft windows server 2012
Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 10, 2026 · NIST NVD
Detected
Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
Jun 17, 2026 · NIST NVD
Updated
Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
Affected
- cpe microsoft/windows server 2012version unspecified
- cpe microsoft/windows server 2012r2
- cpe microsoft/windows server 2016version unspecified
- cpe microsoft/windows server 2019version unspecified
- cpe microsoft/windows server 2022version unspecified
- cpe microsoft/windows server 2022 23h2version unspecified
- cpe microsoft/windows server 2025version unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-25172
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-25172
Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
nvd.nist.gov