CVE-2025-53153 - CVE House
Back to Database
Status published Medium CVE-2025-53153

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Vulnerability Description

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-53153

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)
Vulnerable Versions:
6.1.7601.0, 6.0.6003.0, 6.2.9200.0, 6.3.9600.0, 10.0.14393.0, 10.0.17763.0, 10.0.20348.0, 10.0.25398.0, 10.0.26100.0

Timeline

Official Publish: August 12th, 2025
Last Modified: February 13th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Weaknesses (CWE)