CVE-2025-50164 - CVE House
Back to Database
Status published High CVE-2025-50164

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Vulnerability Description

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-50164

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)
Vulnerable Versions:
6.1.7601.0, 6.0.6003.0, 6.2.9200.0, 6.3.9600.0, 10.0.14393.0, 10.0.17763.0, 10.0.20348.0, 10.0.25398.0, 10.0.26100.0

Timeline

Official Publish: August 12th, 2025
Last Modified: February 26th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Weaknesses (CWE)