Multiple Microsoft Windows Products Vulnerabilities

Severity

Medium

Analysis Summary

CVE-2025-29832 CVSS:6.5

Microsoft Windows could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read flaw in the Routing and Remote Access Service (RRAS) component.

CVE-2025-29831 CVSS:7.5

Microsoft Windows could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free flw in the Remote Desktop Services component.

CVE-2025-29830 CVSS:6.5

Microsoft Windows could allow a remote attacker to obtain sensitive information, caused by the use of uninitialized resource in the Routing and Remote Access Service (RRAS) component.

CVE-2025-29829 CVSS:5.5

Microsoft Windows could allow a local authenticated attacker to obtain sensitive information, caused by the use of uninitialized resource in the Trusted Runtime Interface Driver.

CVE-2025-26677 CVSS:7.5

Microsoft Windows is vulnerable to a denial of service, caused by an uncontrolled resource consumption flaw in the Remote Desktop Gateway (RD Gateway) component.

Impact

Denial of Service
Code Execution
Information Disclosure

Indicators of Compromise

CVE

CVE-2025-29832
CVE-2025-29831
CVE-2025-29830
CVE-2025-29829
CVE-2025-26677

Affected Vendors

Microsoft

Affected Products

Microsoft Windows 10 Version 1809 - 10.0.17763.0
Microsoft Windows Server 2019 - 10.0.17763.0
Microsoft Windows Server 2019 (Server Core installation) - 10.0.17763.0
Microsoft Windows Server 2022 - 10.0.20348.0
Microsoft Windows 11 version 22H2 - 10.0.22621.0
Microsoft Windows 10 Version 22H2 - 10.0.19045.0
Microsoft Windows Server 2025 (Server Core installation) - 10.0.26100.0
Microsoft Windows 11 version 22H3 - 10.0.22631.0
Microsoft Windows Server 2012 (Server Core installation) - 6.2.9200.0
Microsoft Windows Server 2012 R2 - 6.3.9600.0
Microsoft Windows Server 2012 R2 (Server Core installation) - 6.3.9600.0
Microsoft Windows 11 Version 23H2 - 10.0.22631.0
Microsoft Windows Server 2012 - 6.2.9200.0
Microsoft Windows 11 Version 24H2 - 10.0.26100.0
Microsoft Windows Server 2008 Service Pack 2 (Server Core installation) - 6.0.6003.0
Microsoft Windows Server 2008 Service Pack 2 - 6.0.6003.0
Microsoft Windows Server 2016 - 10.0.14393.0
Microsoft Windows Server 2016 (Server Core installation) - 10.0.14393.0
Microsoft Windows Server 2025 - 10.0.26100.0
Microsoft Windows 10 Version 1507 - 10.0.10240.0
Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation) - 6.1.7601.0
Microsoft Windows 10 Version 1607 - 10.0.14393.0
Microsoft Windows Server 2008 R2 Service Pack 1 - 6.1.7601.0
Microsoft Windows 10 Version 21H2 - 10.0.19044.0

Remediation

Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.