Microsoft Releases Out-of-Band Patch For Critical RRAS RCE Vulnerabilities in Windows 11
ID: 25be7996-43c8-5777-ae71-ea176400623a
STIX ID: report--25be7996-43c8-5777-ae71-ea176400623a
Feed Name: cybersecurityNews.com
Threat Score
Microsoft released an out-of-band hotpatch (KB5084597) on 2026-03-13 that patches three critical RRAS vulnerabilities (CVE-2026-25172, CVE-2026-25173, CVE-2026-26111) allowing a malicious RRAS server to cause service disruption or remote code execution when a client connects; the hotpatch (for Windows 11 24H2/25H2, x64 and Arm64) applies without a reboot on hotpatch-enabled devices and includes an updated Servicing Stack Update (KB5083532).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.