Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.
🎯 Affected products19
- Windows Server 2008 R2 for x64-based Systems Service Pack 1
- Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
- Windows Server 2008 for 32-bit Systems Service Pack 2
- Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
- Windows Server 2008 for x64-based Systems Service Pack 2
- Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
- Windows Server 2012
- Windows Server 2012 (Server Core installation)
- Windows Server 2012 R2
- Windows Server 2012 R2 (Server Core installation)
- Windows Server 2016
- Windows Server 2016 (Server Core installation)
- Windows Server 2019
- Windows Server 2019 (Server Core installation)
- Windows Server 2022
- Windows Server 2022 (Server Core installation)
- Windows Server 2022, 23H2 Edition (Server Core installation)
- Windows Server 2025
- Windows Server 2025 (Server Core installation)
✅ Remediation
KB5063877 (Security Update) — fixed build 10.0.17763.7678 KB5063880 (Security Update) — fixed build 10.0.20348.4052 KB5063812 (SecurityHotpatchUpdate) — fixed build 10.0.20348.3989 KB5063878 (Security Update) — fixed build 10.0.26100.4946 KB5064010 (SecurityHotpatchUpdate) — fixed build 10.0.26100.4851 KB5063899 (Security Update) — fixed build 10.0.25398.1791 KB5063871 (Security Update) — fixed build 10.0.14393.8330 KB5063888 (Monthly Rollup) — fixed build 6.0.6003.23471 KB5063948 (Security Only) — fixed build 6.0.6003.23471 KB5063947 (Monthly Rollup) — fixed build 6.1.7601.27872 KB5063927 (Security Only) — fixed build 6.1.7601.27872 KB5063906 (Monthly Rollup) — fixed build 6.2.9200.25622 KB5063950 (Monthly Rollup) — fixed build 6.3.9600.22725
🔗 References (27)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53153
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5063877
- referencehttps://support.microsoft.com/help/5063877
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5063880
- referencehttps://support.microsoft.com/help/5063880
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5063812
- referencehttps://support.microsoft.com/help/5063812
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5063878
- referencehttps://support.microsoft.com/help/5063878
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5064010
- referencehttps://support.microsoft.com/help/5064010
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5063899
- referencehttps://support.microsoft.com/help/5063899
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5063871
- referencehttps://support.microsoft.com/help/5063871
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5063888
- referencehttps://support.microsoft.com/help/5063888
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5063948
- referencehttps://support.microsoft.com/help/5063948
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5063947
- referencehttps://support.microsoft.com/help/5063947
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5063927
- referencehttps://support.microsoft.com/help/5063927
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5063906
- referencehttps://support.microsoft.com/help/5063906
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5063950
- referencehttps://support.microsoft.com/help/5063950