CVE-2025-21318

Summary

CVE-2025-21318 is a newly disclosed Windows Kernel vulnerability that allows an attacker to gain unauthorized access to memory information. This memory information disclosure can lead to potential data leakage, including sensitive data and system configuration details. An attacker could exploit this vulnerability through a specially crafted application or a malicious document, gaining access to the vulnerable system's memory via a local privilege escalation attack. Microsoft has released a security update to address this issue, and it is recommended that all Windows users apply the patch as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.