Analysis Summary

CVE-2025-21351 CVSS:7.5

Windows Active Directory Domain Services API Denial of Service Vulnerability.

CVE-2025-21183 CVSS:7.4

Microsoft Windows could allow a local attacker to gain elevated privileges on the system, caused by a double free flaw in the Resilient File System (ReFS) Deduplication Service component.

CVE-2025-21181 CVSS:7.5

Microsoft Windows is vulnerable to a denial of service, caused by a double free flaw in the Message Queuing (MSMQ) component.

CVE-2025-21208 CVSS:8.8

Microsoft Windows could allow a remote attacker to execute arbitrary code on the system, caused by a heap-based buffer overflow in the Routing and Remote Access Service (RRAS) component.

CVE-2025-21182 CVSS:7.4

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability.

Impact

• Privilege Escalation
• Denial of Service
• Code Execution

Indicators of Compromise

CVE

• CVE-2025-21351

• CVE-2025-21183

• CVE-2025-21181

• CVE-2025-21208

• CVE-2025-21182

Affected Vendors

Remediation

Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.

CVE-2025-21351

CVE-2025-21183

CVE-2025-21181

CVE-2025-21208

CVE-2025-21182