CVE-2025-21336
CVSS 3.1 Score 5.6 of 10 (medium)
Details
Published Jan 14, 2025
Summary
CVE-2025-21336 is a newly disclosed vulnerability affecting Windows systems. This information disclosure issue lies within the cryptographic functionality of the software. An attacker who successfully exploits this vulnerability could gain access to sensitive data, such as private keys or encryption algorithms. The exact cause of the issue remains undisclosed, but Microsoft urges users to apply the available security patch to mitigate the risk. Unpatched systems are at risk of data theft or decryption of encrypted data.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows Server 2008
Affected Vendors
- Microsoft