CVE-2025-21278

Summary

CVE-2025-21278 is a Denial of Service (DoS) vulnerability affecting Windows Remote Desktop Gateway (RD Gateway). An attacker can exploit this issue by sending specially crafted RDP packets to the RD Gateway server, resulting in a crash or memory consumption exhaustion. The vulnerability can lead to a denial of service condition, preventing legitimate users from accessing the RD Gateway server. To mitigate the risk, Microsoft recommends applying the latest security updates and configuring the RD Gateway server to only accept connections from trusted sources.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.