vulnerability

Microsoft Windows: CVE-2025-29958: Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:C/I:N/A:N)
Published
May 13, 2025
Added
May 13, 2025
Modified
Sep 17, 2025

Description

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Solutions

microsoft-windows-windows_10-1507-kb5058387microsoft-windows-windows_10-1607-kb5058383microsoft-windows-windows_10-1809-kb5058392microsoft-windows-windows_10-21h2-kb5058379microsoft-windows-windows_10-22h2-kb5058379microsoft-windows-windows_11-22h2-kb5058405microsoft-windows-windows_11-23h2-kb5058405microsoft-windows-windows_11-24h2-kb5058411microsoft-windows-windows_server_2012-kb5058451microsoft-windows-windows_server_2012_r2-kb5058403microsoft-windows-windows_server_2016-1607-kb5058383microsoft-windows-windows_server_2019-1809-kb5058392microsoft-windows-windows_server_2022-21h2-kb5058385microsoft-windows-windows_server_2022-22h2-kb5058385microsoft-windows-windows_server_2022-23h2-kb5058384microsoft-windows-windows_server_2025-24h2-kb5058411

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.