CVE-2025-21316
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Jan 14, 2025
CWE ID 532
Summary
CVE-2025-21316 is a new Windows Kernel Memory Information Disclosure vulnerability. Maliciously crafted input can cause the kernel to expose sensitive memory information, potentially leading to system compromise. Attackers can exploit this issue remotely without user interaction, making it a significant threat. Microsoft has released a security update to address the vulnerability, and it is recommended that all affected systems be patched as soon as possible. Failure to do so may result in data theft or unauthorized system access.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows 10
- Microsoft Windows 11
- Windows Server 2022
Affected Vendors
- Microsoft