Microsoft has launched an emegency hotpatch update towards a critical network safety vulnerability underneath KB5084597 for Windows 11 25H2 and 24H2.
Microsoft right this moment has launched a new emergency update for Windows 11 LTSC 2024. The new update underneath KB5084597 is a hotpatch out-of-band launch as it’s meant to repair critical network-related safety vulnerabilites. These are tracked underneath IDs CVE-2026-25172, CVE-2026-25173, and CVE-2026-26111, and they’re distant code execution (RCE) flaws affecting the Windows Routing and Remote Access Service (RRAS) administration software.
The description of the vulnerability on MSRC’s web site is as follows:
“Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability: Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.”
If you aren’t acquainted, Routing and Remote Access Service (RRAS) is a Windows function that gives safe distant connectivity and routing features. It permits organizations and enterprises to arrange VPNs, dial-up entry, and site-to-site connections, successfully performing as a software-based router. RRAS helps multiprotocol routing, NAT, and dynamic routing with protocols like BGP, enabling communication between LANs, WANs, and cloud networks, amongst different such features.
The changelog for the KB5084597 update says:
- [Networking] Fixed: This update addresses a safety situation within the Windows Routing and Remote Access Service (RRAS) administration software. If you hook up with a malicious distant server, an attacker might disrupt the software or run code in your system.
You can discover the help article here on Microsoft’s official website. The update will probably be downloaded and put in routinely on hotpatch-enabled units, the corporate notes.
