Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products9

• Windows Server 2016
• Windows Server 2016 (Server Core installation)
• Windows Server 2019
• Windows Server 2019 (Server Core installation)
• Windows Server 2022
• Windows Server 2022 (Server Core installation)
• Windows Server 2022, 23H2 Edition (Server Core installation)
• Windows Server 2025
• Windows Server 2025 (Server Core installation)

✅ Remediation

KB5068791 (Security Update) — fixed build 10.0.17763.8027 KB5068787 (Security Update) — fixed build 10.0.20348.4405 KB5068840 (Security Hotpatch Update) — fixed build 10.0.20348.4346 KB5068861 (Security Update) — fixed build 10.0.26100.7171 KB5068966 (Security Hotpatch Update) — fixed build 10.0.26100.7092 KB5068779 (Security Update) — fixed build 10.0.25398.1965 KB5068864 (Security Update) — fixed build 10.0.14393.8594

🔗 References (15)

• advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60713
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5068791
• referencehttps://support.microsoft.com/help/5068791
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5068787
• referencehttps://support.microsoft.com/help/5068787
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5068840
• referencehttps://support.microsoft.com/help/5068840
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5068861
• referencehttps://support.microsoft.com/help/5068861
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5068966
• referencehttps://support.microsoft.com/help/5068966
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5068779
• referencehttps://support.microsoft.com/help/5068779
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5068864
• referencehttps://support.microsoft.com/help/5068864