CVE-2025-21269
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 14, 2025
CWE ID 41
Summary
CVE-2025-21269 is a security vulnerability affecting Windows HTML Platforms. This issue permits an attacker to bypass security features, potentially allowing the execution of malicious code. An attacker could exploit this flaw by tricking a user into opening a specially crafted HTML file or visiting a malicious website. Successful exploitation could lead to remote code execution with the same user rights as the current process. Microsoft strongly advises users and administrators to apply the available patch as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows Server 2008
Affected Vendors
- Microsoft