CVE-2025-59230

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions (affected versions not specified)

Description An improper access control flaw exists in the Windows Remote Access Connection Manager (RASMAN). This allows an authenticated local attacker to elevate privileges, potentially gaining SYSTEM-level access. The flaw stems from insufficient validation of user permissions when interacting with the Remote Access Connection Manager. This vulnerability is under active exploitation in attacks, with reports indicating threat actors are targeting enterprise environments. Approximately an unknown number of devices worldwide are potentially affected. The vulnerability allows attackers with limited access to escalate privileges and gain full control over systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.