logo

Microsoft releases Windows 11 OOB hotpatch to fix RRAS RCE flaw

ID: 93aa4156-3673-5e83-8927-7cde90ad6bb2

STIX ID: report--93aa4156-3673-5e83-8927-7cde90ad6bb2

Feed Name: Bleeping Computer

Threat Score
45/100

Date Published: 2026-03-14

Date Updated: 2026-04-20

Author: Lawrence Abrams

...
...

Microsoft published an out-of-band hotpatch (KB5084597) for Windows 11 Enterprise (25H2, 24H2 and LTSC 2024) to address three RRAS management tool vulnerabilities (CVE-2026-25172, CVE-2026-25173, CVE-2026-26111) that could allow remote code execution when a domain-joined user is tricked into connecting to a malicious server; the hotpatch delivers fixes in-memory to avoid reboots and is automatically applied to devices enrolled in Windows Autopatch.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.