CVE-2025-21319
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Summary
CVE-2025-21319 is a newly disclosed Windows Kernel vulnerability that allows an attacker to gain unauthorized access to memory information. The flaw, which can be triggered through a specially crafted application or maliciously crafted file, could potentially expose sensitive data or enable further attacks. The vulnerability has been rated as critical due to the potential impact on system stability and security. Microsoft has released patches to address the issue and urged users to apply them promptly to mitigate the risk. Failure to apply the patch could result in data leakage or even system takeover.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows 10
- Microsoft Windows 11
- Microsoft Windows Server 2008
- Windows Server 2022
Affected Vendors
- Microsoft