CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Remote Access Connection Manager (RasMan) Null Pointer Dereference Local DoS Vulnerability (CVE-2026-21525) Technical Advisory
[Affected Scope] Windows and Windows Server operating systems utilizing the Windows Remote Access Connection Manager (RasMan) service.
[Impact] An unauthorized local attacker can trigger a Null Pointer Dereference in the RasMan service, causing a local Denial of Service (DoS) by crashing the service or the entire system.
[Mitigation] Apply the latest Microsoft cumulative security updates immediately, or disable the RasMan service if remote access features are not required.
Windows Remote Access Connection Manager (RasMan) Local Privilege Escalation Vulnerability (CVE-2025-59230) Technical Advisory
[Affected Scope] Windows and Windows Server systems running the Remote Access Connection Manager (RasMan) service
[Impact] An authorized local attacker can elevate privileges to SYSTEM, gaining full administrative control over the affected host
[Mitigation] Apply the latest Microsoft cumulative security updates immediately, or disable the RasMan service as a temporary workaround