CVE-2025-21225

Summary

CVE-2025-21225 is a newly disclosed Denial of Service (DoS) vulnerability affecting Microsoft's Windows Remote Desktop Gateway (RD Gateway). Malicious actors can exploit this weakness by sending specially crafted RDP packets to targeted RD Gateway servers, resulting in a denial of service condition. Successful exploitation may cause affected systems to become unresponsive, disrupting remote access services for legitimate users. Microsoft released a security update to mitigate the risk of attacks, and administrators are advised to apply it as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.