A critical double free vulnerability in the Microsoft Windows RRAS component enables unauthenticated remote code execution, posing a severe threat to server infrastructure.

The flaw is a double free (CWE-415) within the RRAS service, which manages network routing and remote access connections. An unauthenticated attacker can trigger this memory corruption vulnerability over the network to achieve remote code execution.

Successful exploitation grants an attacker the ability to execute arbitrary code with the privileges of the RRAS service, which typically runs with elevated system permissions. This could lead to full system compromise, unauthorized access to sensitive data, and potential lateral movement within the network. With a CVSS score of 8.8, this vulnerability represents a high risk to organizational security and operational continuity.

Immediate Action: Apply the relevant security updates provided by Microsoft in the official security update guide to patch the vulnerable RRAS component.

Proactive Monitoring: Monitor system logs for unusual RRAS service restarts or abnormal network traffic patterns directed at routing ports, which may indicate exploitation attempts.

Compensating Controls: Restrict access to the RRAS service to trusted IP addresses only and ensure that perimeter firewalls block unauthorized traffic to the associated service ports.

Public Exploit Available: No

Given the potential for full system compromise via remote code execution, this vulnerability should be prioritized for immediate remediation. Administrators must identify all instances of the affected Windows Server versions and apply the vendor-supplied patches as soon as possible to mitigate the risk of unauthorized access.