CVE-2025-62549

High · 8.8

CVSS

8.8

EPSS

1.3%

Published

Dec 9, 2025

CISA due date

—

The record

Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

Ecosystem	Package	Introduced	Fixed