CVE-2025-21291
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 415
Summary
CVE-2025-21291 is a remote code execution vulnerability affecting Windows Direct Show. Maliciously crafted media files can exploit this flaw, allowing attackers to execute arbitrary code on vulnerable systems. Successful exploitation could result in significant data loss or system compromise, making it a critical security risk for Windows users. Microsoft has released a patch to address this issue, and it is strongly recommended that all users install the update as soon as possible. Failure to do so may leave systems open to attack.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows 10
- Microsoft Windows 11
- Windows Server 2022
Affected Vendors
- Microsoft