CVE-2025-21284

Summary

CVE-2025-21284 is a newly disclosed Denial of Service (DoS) vulnerability affecting Windows Virtual Trusted Platform Module (vTPM). This vulnerability allows an attacker to send specially crafted requests to the vTPM service, causing it to enter an infinite loop and become unresponsive. As a result, the system may become unavailable until the vTPM service is restarted. This issue may lead to a significant disruption of services that rely on the vTPM for security and trust. Microsoft has released a security update to address this vulnerability, and administrators are strongly encouraged to install it as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.