CVE-2025-21326
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 843
Summary
CVE-2025-21326 is a newly disclosed remote code execution vulnerability affecting Microsoft's Internet Explorer browser. The flaw, which permits an attacker to execute malicious code on a victim's system, exists in the way the browser handles specified web content. If successfully exploited, an attacker can gain the same user rights as the current user, potentially leading to serious security consequences. Users are advised to apply the available patch or upgrade to a more secure browser as soon as possible to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Windows Server 2022
Affected Vendors
- Microsoft