CVE-2025-64678

High · 8.8

CVSS

8.8

EPSS

1.0%

Published

Dec 9, 2025

CISA due date

—

The record

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

Ecosystem	Package	Introduced	Fixed