CVE-2025-21220

Summary

CVE-2025-21220 is a newly disclosed information disclosure vulnerability affecting Microsoft Message Queuing (MSMQ). An attacker could exploit this vulnerability by sending a specially crafted message to a targeted MSMQ queue, resulting in the disclosure of sensitive information. Successful exploitation does not require user interaction or elevated privileges, making it potentially dangerous in various environments. Microsoft has released a patch to address this issue, and administrators are encouraged to apply it as soon as possible to mitigate potential risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.