Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network.
Microsoft
CVE-2025-29956 CVSS 5.4
2025-05-13 07:00 UTC · 2025-05-13 04:00 -03
Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network.
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
Acknowledgement added. This is an informational change only.
To comprehensively address CVE-2024-49128, Microsoft has released May 2025 security updates for all affected versions of Windows Server. Microsoft recommends that customers install the updates to be fully protected from the vulnerability. …