CVE-2025-21376

Summary

CVE-2025-21376 is a remote code execution vulnerability affecting Microsoft's Lightweight Directory Access Protocol (LDAP) service in certain versions of Windows. An attacker can exploit this issue by sending specially crafted LDAP messages to a targeted LDAP server, allowing them to execute arbitrary code on the server. Successful exploitation could result in a compromised system, leading to potential data theft or further attacks. It is recommended that affected systems are updated with the latest LDAP patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.