CVE-2025-21358

Summary

CVE-2025-21358 is a newly disclosed vulnerability affecting Windows Core Messaging. This issue grants attackers local privilege escalation capabilities, allowing them to elevate their user rights to that of a higher privilege level on an affected system. Successful exploitation of this vulnerability could enable attackers to install programs, view, change, or delete data at the highest level of access. It's essential for organizations to apply the relevant Microsoft security patch as soon as possible to mitigate this risk. Failure to address this vulnerability leaves systems vulnerable to potential unauthorized access and data breaches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.