CVE-2025-21255

Summary

CVE-2025-21255 is a newly disclosed vulnerability affecting Windows Digital Media. This elevation of privilege issue grants attackers local system rights when exploited, potentially allowing them to install programs, modify data, or create new accounts with administrative privileges. Successful exploitation requires user interaction, such as opening a malicious media file or visiting a specially crafted website. Microsoft has released a security update to address this vulnerability, and it is recommended that all Windows users apply the patch as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.