Severity
Medium
Analysis Summary
CVE-2025-21249 CVSS:6.6
Microsoft Windows Digital Media could allow a physical attacker to gain elevated privileges on the system.
CVE-2025-21229 CVSS:6.6
Microsoft Windows Digital Media could allow a physical attacker to gain elevated privileges on the system, caused by an out-of-bounds read error.
CVE-2025-21202 CVSS:6.1
Microsoft Windows Recovery Environment Agent could allow a physical attacker to gain elevated privileges on the system.
CVE-2025-21249 CVSS:6.6
Microsoft Windows Digital Media could allow a physical attacker to gain elevated privileges on the system.
Impact
- Privilege Escalation
Indicators of Compromise
CVE
CVE-2025-21214
CVE-2025-21229
CVE-2025-21202
CVE-2025-21249
Affected Vendors
- Microsoft
Affected Products
- Microsoft Windows 10 Version 1809 - 10.0.17763.0
- Microsoft Windows Server 2019 - 10.0.17763.0
- Microsoft Windows Server 2019 (Server Core installation) - 10.0.17763.0
- Microsoft Windows Server 2022 - 10.0.20348.0
- Microsoft Windows 11 Version 24H2 - 10.0.26100.0
- Microsoft Windows Server 2016 - 10.0.14393.0
- Microsoft Windows Server 2016 (Server Core installation) - 10.0.14393.0
- Microsoft Windows 10 Version 21H2 - 10.0.19043.0
- Microsoft Windows Server 2025 - 10.0.26100.0
- Microsoft Windows 10 Version 1507 - 10.0.10240.0
Remediation
Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.