CVE-2025-21285

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Jan 14, 2025
CWE ID 476

Summary

CVE-2025-21285 is a Denial of Service (DoS) vulnerability affecting Microsoft Message Queuing (MSMQ). An attacker can exploit this vulnerability by sending malicious messages to an MSMQ queue, causing the MSMQ service to crash and become unresponsive. This can result in a Denial of Service condition, making the affected system unavailable to users and potentially impacting business operations. Microsoft has released a patch to address this issue, and it is strongly recommended that affected systems be updated as soon as possible to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Windows Server 2008

Affected Vendors

  • Microsoft