CVE-2025-21271

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jan 14, 2025
CWE ID 126

Summary

CVE-2025-21271 is a newly disclosed vulnerability affecting the Windows Cloud Files Mini Filter Driver. This issue allows an attacker to gain elevated privileges through a specially crafted input, potentially enabling them to execute arbitrary code and take control of the affected system. The vulnerability could be exploited through network attacks, making it a significant threat to organizations and individuals using the Windows operating system. To mitigate this risk, Microsoft advises users to install the latest security updates as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share