CVE-2025-21410HighCVSS 8.8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Published
June 3, 2026
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2025-21410 →

📋 Description

According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution? This attack requires an admin user on the client to connect to a malicious server, and that could allow the attacker to gain code execution on the client.

How could an attacker exploit this vulnerability? An attacker could exploit this vulnerability by tricking a user into sending a request to a malicious server. This could result in the server returning malicious data that might cause arbitrary code execution on the user's system.

🎯 Affected products19

  • Windows Server 2008 R2 for x64-based Systems Service Pack 1
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
  • Windows Server 2008 for 32-bit Systems Service Pack 2
  • Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
  • Windows Server 2008 for x64-based Systems Service Pack 2
  • Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
  • Windows Server 2012
  • Windows Server 2012 (Server Core installation)
  • Windows Server 2012 R2
  • Windows Server 2012 R2 (Server Core installation)
  • Windows Server 2016
  • Windows Server 2016 (Server Core installation)
  • Windows Server 2019
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2022
  • Windows Server 2022 (Server Core installation)
  • Windows Server 2022, 23H2 Edition (Server Core installation)
  • Windows Server 2025
  • Windows Server 2025 (Server Core installation)

✅ Remediation

KB5052000 (Security Update) — fixed build 10.0.17763.6893 KB5051979 (Security Update) — fixed build 10.0.20348.3207 KB5052106 (SecurityHotpatchUpdate) — fixed build 10.0.20348.3148 KB5051987 (Security Update) — fixed build 10.0.26100.3194 KB5052105 (SecurityHotpatchUpdate) — fixed build 10.0.26100.3107 KB5051980 (Security Update) — fixed build 10.0.25398.1425 KB5052006 (Security Update) — fixed build 10.0.14393.7785 KB5052038 (Monthly Rollup) — fixed build 6.0.6003.23117 KB5052072 (Security Only) — fixed build 6.0.6003.23117 KB5052016 (Monthly Rollup) — fixed build 6.1.7601.27566 KB5052032 (Security Only) — fixed build 6.1.7601.27566 KB5052020 (Monthly Rollup) — fixed build 6.2.9200.25317 KB5052042 (Monthly Rollup) — fixed build 6.3.9600.22417

🔗 References (25)