CVE-2025-59230

Published Oct 14, 2025

Last updated 3 months ago

Exploit known CVSS high 7.8

RasMan

Overview

Description: Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
Source: secure@microsoft.com
NVD status: Analyzed
Products: windows_10_1507, windows_10_1607, windows_10_1809, windows_10_21h2, windows_10_22h2, windows_11_22h2, windows_11_23h2, windows_11_24h2, windows_11_25h2, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019, windows_server_2022, windows_server_2022_23h2, windows_server_2025

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: Microsoft Windows Improper Access Control Vulnerability
Exploit added on: Oct 14, 2025
Exploit action due: Nov 4, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

secure@microsoft.com: CWE-284

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "030F3214-D6AF-40A9-9FC9-523AC9870581",
            "versionEndExcluding": "10.0.10240.21161",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "matchCriteriaId": "4932CB20-D134-4EDF-8F21-F9D0AF80BFEA",
            "versionEndExcluding": "10.0.10240.21161",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "D8145D41-BFB2-47A6-B5E5-1A038A27C1C1",
            "versionEndExcluding": "10.0.14393.8519",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "matchCriteriaId": "3EE0CDB1-CBF3-45F2-8F0B-96A9D0757B42",
            "versionEndExcluding": "10.0.14393.8519",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "E216CD5B-8885-4E17-8718-97E88A724A44",
            "versionEndExcluding": "10.0.17763.7919",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "matchCriteriaId": "36E44227-0320-43B1-A0D9-EB28B25CDB4D",
            "versionEndExcluding": "10.0.17763.7919",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "1485A427-10FF-4C39-9911-4C6F1820BE7F",
            "versionEndExcluding": "10.0.19044.6456",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "26CAACAA-3FE8-4740-8CF2-6BF3D069C47F",
            "versionEndExcluding": "10.0.19045.6456",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A",
            "versionEndExcluding": "10.0.22621.6060",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "4AF873E4-B2FE-4504-BFF0-FC71121FC9A4",
            "versionEndIncluding": "10.0.22631.6060",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D",
            "versionEndExcluding": "10.0.26100.6899",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5",
            "versionEndExcluding": "10.0.26200.6899",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "860ADFF9-62D0-425B-9310-99ACFC92EB12",
            "versionEndIncluding": "10.0.14393.8519",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "20810926-AEC9-4C09-9C52-B4B8FADECF3A",
            "versionEndExcluding": "10.0.17763.7919",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7",
            "versionEndExcluding": "10.0.20348.4294",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600",
            "versionEndExcluding": "10.0.25398.1913",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "CD6268EB-C42B-406F-B3FF-6E694F93BF41",
            "versionEndIncluding": "10.0.26100.6899",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.

Overview

Risk scores

CVSS 3.1

Known exploits

Weaknesses

Social media

Configurations

Related CVEs

References