CVE-2025-21235

Summary

CVE-2025-21235 is a newly disclosed vulnerability affecting the Windows PrintWorkflowUserSvc service. This elevation of privilege issue allows an attacker to gain administrative privileges on a targeted system by exploiting a flaw in the service. Successful exploitation could result in significant harm, including the installation of malware or unauthorized access to sensitive information. It is recommended that affected systems be patched as soon as possible to mitigate this risk. Windows users should also practice safe browsing habits and avoid clicking on suspicious links or downloading unverified attachments to prevent potential exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.