Severity
High
Analysis Summary
CVE-2025-21351 CVSS:7.5
Windows Active Directory Domain Services API Denial of Service Vulnerability.
CVE-2025-21183 CVSS:7.4
Microsoft Windows could allow a local attacker to gain elevated privileges on the system, caused by a double free flaw in the Resilient File System (ReFS) Deduplication Service component.
CVE-2025-21181 CVSS:7.5
Microsoft Windows is vulnerable to a denial of service, caused by a double free flaw in the Message Queuing (MSMQ) component.
CVE-2025-21208 CVSS:8.8
Microsoft Windows could allow a remote attacker to execute arbitrary code on the system, caused by a heap-based buffer overflow in the Routing and Remote Access Service (RRAS) component.
CVE-2025-21182 CVSS:7.4
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability.
Impact
- Privilege Escalation
- Denial of Service
- Code Execution
Indicators of Compromise
CVE
CVE-2025-21351
CVE-2025-21183
CVE-2025-21181
CVE-2025-21208
CVE-2025-21182
Affected Vendors
- Microsoft
Affected Products
- Microsoft Windows Server 2022
- Microsoft Windows 10 Version 1809 - 10.0.17763.0
- Microsoft Windows Server 2019 - 10.0.17763.0
- Microsoft Windows Server 2019 (Server Core installation) - 10.0.17763.0
- Microsoft Windows Server 2022 - 10.0.20348.0
- Microsoft Windows Server 2025 (Server Core installation) - 10.0.26100.0
- Microsoft Windows 11 Version 24H2 - 10.0.26100.0
- Microsoft Windows Server 2008 Service Pack 2 - 6.0.6003.0
- Microsoft Windows Server 2016 - 10.0.14393.0
- Microsoft Windows Server 2016 (Server Core installation) - 10.0.14393.0
- Microsoft Windows 10 Version 21H2 - 10.0.19043.0
- Microsoft Windows Server 2025 - 10.0.26100.0
Remediation
Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.