CVE-2025-21250
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 122
Summary
CVE-2025-21250 is a remote code execution vulnerability affecting the Windows Telephony Service. The flaw, if exploited, allows an unauthenticated attacker to execute arbitrary code on the targeted system. Successful exploitation can lead to the installation of malware or unauthorized access to sensitive data. This vulnerability poses a significant risk to organizations and individuals using unpatched Windows systems. It is strongly recommended that affected systems be updated as soon as possible to mitigate the threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows Server 2008
Affected Vendors
- Microsoft