CVE-2025-21359
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2025-21359 is a new Windows Kernel Security Feature bypass vulnerability that has been identified. This issue allows an attacker to bypass security features, potentially gaining elevated privileges within the system. The exact cause of the vulnerability is still under investigation, but it is known to affect certain versions of the Windows operating system. Successful exploitation could result in serious security implications, including unauthorized access to sensitive data or the ability to install malware. Microsoft is urged to release a patch as soon as possible to mitigate the risks associated with this vulnerability. Until then, users are advised to practice good cybersecurity hygiene, including keeping their systems up-to-date with the latest security patches and using strong, unique passwords for all accounts.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows Server 2008
Affected Vendors
- Microsoft