CVE-2025-21285
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 476
Summary
CVE-2025-21285 is a Denial of Service (DoS) vulnerability affecting Microsoft Message Queuing (MSMQ). An attacker can exploit this vulnerability by sending malicious messages to an MSMQ queue, causing the MSMQ service to crash and become unresponsive. This can result in a Denial of Service condition, making the affected system unavailable to users and potentially impacting business operations. Microsoft has released a patch to address this issue, and it is strongly recommended that affected systems be updated as soon as possible to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows Server 2008
Affected Vendors
- Microsoft