CVE-2025-21320

Summary

CVE-2025-21320 is a newly disclosed Windows Kernel vulnerability that allows an attacker to gain unauthorized memory information disclosure. This issue stems from a flaw in the Windows Kernel, potentially enabling an adversary to access sensitive data residing in the system's memory. Successful exploitation may lead to further system compromise and potential data theft. Microsoft has acknowledged the vulnerability and is currently working on a patch to address this issue. Users are encouraged to apply the update as soon as it becomes available to mitigate potential risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.