PT-2026-24300 · Microsoft · Windows+24

Published 2026-03-10 · Updated 2026-03-16 · CVE-2026-25173

BDU

CVSS v2.0

9.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Уязвимость службы Routing and Remote Access Service (RRAS) операционных систем Windows связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, ействующему удаленно, выполнить произвольный код

Fix

RCE

Integer Overflow

Heap Based Buffer Overflow

Weakness Enumeration

CWE-190

CWE-122

Related Identifiers

BDU:2026-02972

CVE-2026-25173

Affected Products

Windows

Windows 10 1607

Windows 10 1809

Windows 10 21H2

Windows 10 22H2

Windows 10 Version 1607

Windows 10 Version 1809

Windows 10 Version 21H2

Windows 10 Version 22H2

Windows 11 23H2

Windows 11 24H2

Windows 11 25H2

Windows 11 26H1

Windows 11 Version 23H2

Windows 11 Version 24H2

Windows 11 Version 25H2

Windows 11 Version 26H1

Windows 11 Version 22H3

Windows Server 2012

Windows Server 2012 R2

Windows Server 2016

Windows Server 2019

Windows Server 2022

Windows Server 2025

Windows Server 2022 23H2

References · 12

• https://bdu.fstec.ru/vul/2026-02972 · Security Note
• https://msrc.microsoft.com/update-guide/advisory/CVE-2026-25173 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25173 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25173 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-25173 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25173 · Vendor Advisory
• https://t.me/true_secator/7998 · Telegram Post
• https://twitter.com/infoflowcloud/status/2033363110480715782 · Twitter Post
• https://t.me/msrcreports/3382 · Telegram Post
• https://reddit.com/r/pwnhub/comments/1rujavg/microsoft_issues_urgent_patch_for_critical_rras · Reddit Post
• https://twitter.com/CVEnew/status/2033361154160857575 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1rtzdt4/microsoft_issues_windows_11_oob_hotpatch_for · Reddit Post