Security Feature Bypass Vulnerability in Microsoft Products
CVE-2025-21189
4.3MEDIUM
Key Information:
- Vendor
- Microsoft
- Status
- Vendor
- CVE Published:
- 14 January 2025
Summary
The MapUrlToZone security feature bypass vulnerability allows an attacker to exploit the security boundaries in affected Microsoft products. By manipulating URLs, an attacker can evade security measures that are designed to prevent unauthorized access or execution of malicious content. This vulnerability can be leveraged to conduct further attacks or escalate privileges, potentially leading to significant security risks for users.
Affected Version(s)
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.20890
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.7699
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.6775
References
CVSS V3.1
Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved