CVE-2025-21372

Summary

CVE-2025-21372 is a critical File System Elevation of Privilege vulnerability affecting Microsoft's Brokering service. Maliciously crafted messages sent to the Remote Procedure Call (RPC) endpoint of the service can exploit this weakness, granting attackers system-level access on the targeted system. This vulnerability poses a significant threat as it allows an unauthenticated attacker to bypass security restrictions and execute arbitrary code with elevated privileges. Mitigation measures include applying the latest security patches and restricting access to the RPC endpoint.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.