CVE-2025-21313
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jan 14, 2025
CWE ID 833
Summary
CVE-2025-21313 is a Denial of Service (DoS) vulnerability affecting the Windows Security Account Manager (SAM). An attacker can exploit this issue by sending specific malformed messages to the SAM, leading to a memory leak and causing the SAM service to crash. Consequently, the targeted system becomes unresponsive, resulting in a denial of service condition. This vulnerability can potentially impact all supported versions of Windows and demands immediate attention for patching and mitigation strategies.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows 11
- Windows Server 2022
Affected Vendors
- Microsoft