CVE-2025-21374

Summary

CVE-2025-21374 is a vulnerability affecting the Common System Configuration (CSC) service in certain Windows versions. This issue permits an unauthenticated attacker to obtain sensitive information through specially crafted DHCP (Dynamic Host Configuration Protocol) packets. Successful exploitation could lead to significant information disclosure, potentially enabling further attacks against the vulnerable system. Microsoft has released a security update to address this vulnerability. It is recommended that affected organizations prioritize installing the patch to mitigate the risk of potential data exposure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.