Microsoft disclosed a zero-day vulnerability affecting the NetMan service

CVE-2025-59230 is a locally exploitable elevation-of-privilege vulnerability in the Windows Remote Access Connection Manager (RasMan) that allows a locally authenticated attacker to execute code as SYSTEM; it is rated CVSS 7.8 and has been observed exploited in the wild. Microsoft published October 2025 patches (e.g., KB5044284, KB5044273) and recommends applying updates or disabling the RasMan service as interim mitigation.