New Windows RasMan zero-day flaw gets free, unofficial patches
A new Windows zero-day vulnerability that enables attackers to bring down the Remote Access Connection Manager (RasMan) service has free unofficial remedies.
Point-to-Point Protocol over Ethernet (PPoE), VPN, and other remote network connections are managed by RasMan, an essential Windows system service that launches automatically and operates in the background with SYSTEM-level privileges.
While investigating CVE-2025-59230, a Windows RasMan privilege escalation vulnerability exploited in attacks that was patched in October, ACROS Security, which oversees the 0patch micropatching platform, found a new denial-of-service (DoS) vulnerability.
The DoS zero-day is still unpatched in all versions of Windows, including Windows 7 through Windows 11 and Windows Server 2008 R2 through Ser...