CVE-2026-25172

CVE Enrichment

CVSS: 8.0 HIGH
EPSS: 1.00%
EPSS Percentile: 63.07%
CISA KEV: Not listed

Description

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 11-Mar-2026 01:18
Last Modified: 17-Jun-2026 17:24
EPSS Date: 2026-11-08
CWE: CWE-122, CWE-190

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:L /
                            UI:R /
                            S:U /
                            C:H /
                            I:H /
                            A:H

CNA Products / Version Status

Microsoft · Windows 10 Version 1607 Source: CNA · [email protected]
Default status: unknown

10.0.14393.0 ≤ version < 10.0.14393.8957 — affected (custom)

Platforms: 32-bit Systems, x64-based Systems
Microsoft · Windows 10 Version 1809 Source: CNA · [email protected]
Default status: unknown

10.0.17763.0 ≤ version < 10.0.17763.8511 — affected (custom)

Platforms: 32-bit Systems, x64-based Systems
Microsoft · Windows 10 Version 21H2 Source: CNA · [email protected]
Default status: unknown

10.0.19044.0 ≤ version < 10.0.19044.7058 — affected (custom)

Platforms: 32-bit Systems, ARM64-based Systems, x64-based Systems
Microsoft · Windows 10 Version 22H2 Source: CNA · [email protected]
Default status: unknown

10.0.19045.0 ≤ version < 10.0.19045.7058 — affected (custom)

Platforms: 32-bit Systems, ARM64-based Systems, x64-based Systems
Microsoft · Windows 11 Version 23H2 Source: CNA · [email protected]
Default status: unknown

10.0.22631.0 ≤ version < 10.0.22631.6783 — affected (custom)

Platforms: x64-based Systems
Microsoft · Windows 11 Version 24H2 Source: CNA · [email protected]
Default status: unknown

10.0.26100.0 ≤ version < 10.0.26100.8037 — affected (custom)

Platforms: ARM64-based Systems, x64-based Systems
Microsoft · Windows 11 Version 25H2 Source: CNA · [email protected]
Default status: unknown

10.0.26200.0 ≤ version < 10.0.26200.8037 — affected (custom)

Platforms: ARM64-based Systems, x64-based Systems
Microsoft · Windows 11 version 22H3 Source: CNA · [email protected]
Default status: unknown

10.0.22631.0 ≤ version < 10.0.22631.6783 — affected (custom)

Platforms: ARM64-based Systems
Microsoft · Windows 11 version 26H1 Source: CNA · [email protected]
Default status: unknown

10.0.28000.0 ≤ version < 10.0.28000.1719 — affected (custom)

Platforms: ARM64-based Systems, x64-based Systems
Microsoft · Windows Server 2012 (Server Core installation) Source: CNA · [email protected]
Default status: unknown

6.2.9200.0 ≤ version < 6.2.9200.25973 — affected (custom)

Platforms: x64-based Systems
Microsoft · Windows Server 2012 R2 (Server Core installation) Source: CNA · [email protected]
Default status: unknown

6.3.9600.0 ≤ version < 6.3.9600.23074 — affected (custom)

Platforms: x64-based Systems
Microsoft · Windows Server 2012 R2 Source: CNA · [email protected]
Default status: unknown

6.3.9600.0 ≤ version < 6.3.9600.23074 — affected (custom)

Platforms: x64-based Systems
Microsoft · Windows Server 2012 Source: CNA · [email protected]
Default status: unknown

6.2.9200.0 ≤ version < 6.2.9200.25973 — affected (custom)

Platforms: x64-based Systems
Microsoft · Windows Server 2016 (Server Core installation) Source: CNA · [email protected]
Default status: unknown

10.0.14393.0 ≤ version < 10.0.14393.8957 — affected (custom)

Platforms: x64-based Systems
Microsoft · Windows Server 2016 Source: CNA · [email protected]
Default status: unknown

10.0.14393.0 ≤ version < 10.0.14393.8957 — affected (custom)

Platforms: x64-based Systems
Microsoft · Windows Server 2019 (Server Core installation) Source: CNA · [email protected]
Default status: unknown

10.0.17763.0 ≤ version < 10.0.17763.8511 — affected (custom)

Platforms: x64-based Systems
Microsoft · Windows Server 2019 Source: CNA · [email protected]
Default status: unknown

10.0.17763.0 ≤ version < 10.0.17763.8511 — affected (custom)

Platforms: x64-based Systems
Microsoft · Windows Server 2022 Source: CNA · [email protected]
Default status: unknown

10.0.20348.0 ≤ version < 10.0.20348.4893 — affected (custom)

Platforms: x64-based Systems
Microsoft · Windows Server 2022, 23H2 Edition (Server Core installation) Source: CNA · [email protected]
Default status: unknown

10.0.25398.0 ≤ version < 10.0.25398.2207 — affected (custom)

Platforms: x64-based Systems
Microsoft · Windows Server 2025 (Server Core installation) Source: CNA · [email protected]
Default status: unknown

10.0.26100.0 ≤ version < 10.0.26100.32522 — affected (custom)

Platforms: x64-based Systems
Microsoft · Windows Server 2025 Source: CNA · [email protected]
Default status: unknown

10.0.26100.0 ≤ version < 10.0.26100.32522 — affected (custom)

Platforms: x64-based Systems

Affected Products / Versions

microsoft / windows_server_2012 Source: NVD CPE · affected
Version / affected range: -
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
microsoft / windows_server_2012 Source: NVD CPE · affected
Version / affected range: r2
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
microsoft / windows_server_2016 Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 10.0.14393.8957
cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
microsoft / windows_server_2019 Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 10.0.17763.8511
cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
microsoft / windows_server_2022 Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 10.0.20348.4830
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
microsoft / windows_server_2022_23h2 Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 10.0.25398.2207
cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*
microsoft / windows_server_2025 Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 10.0.26100.32463
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*

References

[email protected]

Last enrichment sync: 09-Nov-2026 05:25
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

The cumulative hotpatch (covering CVE-2026-25172, CVE-2026-25173, and CVE-2026-26111) applies in-memory fixes to avoid reboots and is automatically delivered to devices enrolled in the Windows Autopatch hotpatch program. Microsoft Releases No-Reboot Hotpatch for Windows RRAS RCE Flaws

CVE (2)

Vendors (1)

Products (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.