CVE-2025-21420

Summary

CVE-2025-21420 is an elevation of privilege vulnerability affecting the Windows Disk Cleanup Tool. Successful exploitation of this vulnerability allows an attacker to run arbitrary code with administrator privileges. An attacker could exploit this flaw by tricking a user into deleting a specifically crafted file, leading to the execution of malware or unauthorized system modifications. This vulnerability poses a significant risk to organizations and individuals using the Windows operating system, particularly those with weak security measures in place. Microsoft has released a patch to address this issue, and it is strongly recommended that users install it as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.