Product:
Windows Remote Procedure Call
Summary
Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network. This vulnerability can lead to significant disruptions in service availability. Attackers can exploit this flaw to overwhelm the system, causing it to become unresponsive.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2025-59502 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted requests to the Windows Remote Procedure Call service over the network. By continuously sending these requests, the attacker can consume system resources, leading to a denial of service condition. The low attack complexity means that even those with minimal technical skills can potentially carry out this attack.
Affected Products
- Windows Remote Procedure Call: A service that allows programs to communicate with each other over a network, which is vulnerable to resource exhaustion attacks.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, network security measures such as firewalls and intrusion detection systems can help monitor and limit unauthorized access to the Windows Remote Procedure Call service.