CVE-2025-21319

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Jan 14, 2025
CWE ID 532

Summary

CVE-2025-21319 is a newly disclosed Windows Kernel vulnerability that allows an attacker to gain unauthorized access to memory information. The flaw, which can be triggered through a specially crafted application or maliciously crafted file, could potentially expose sensitive data or enable further attacks. The vulnerability has been rated as critical due to the potential impact on system stability and security. Microsoft has released patches to address the issue and urged users to apply them promptly to mitigate the risk. Failure to apply the patch could result in data leakage or even system takeover.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Windows 10
  • Microsoft Windows 11
  • Microsoft Windows Server 2008
  • Windows Server 2022

Affected Vendors

  • Microsoft