CVE-2025-21297
CVSS 3.1 Score 8.1 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 416
Summary
CVE-2025-21297 is a critical Remote Code Execution vulnerability affecting Windows Remote Desktop Services. This issue allows unauthenticated attackers to execute arbitrary code on targeted systems by sending a specially crafted RDP packet. Successful exploitation could lead to complete system compromise and potential data theft or unauthorized access. Microsoft strongly urges administrators to apply the available patch or enable mitigations to protect affected systems.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows Server 2008
- Windows Server 2022
Affected Vendors
- Microsoft