New Windows RasMan zero-day flaw gets free, unofficial patches

**Windows RasMan zero-day DoS enables privilege escalation:** ACROS Security disclosed an unpatched denial-of-service flaw in the Remote Access Connection Manager that allows unprivileged users to crash the SYSTEM‑level service via a null-pointer during list traversal; when chained with CVE-2025-59230 this can lead to privilege escalation and code execution. ACROS/0patch has released free unofficial micropatches for affected Windows versions while Microsoft says it will address the issue in a future update.