Skip to content
OpenAdvisories
High MSRC-CVE-2025-21293 1 CVE

Active Directory Domain Services Elevation of Privilege Vulnerability

Published Jan 14, 2025 · Updated Sep 9, 2025 · Revision 2

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

How could an attacker exploit this vulnerability?
To exploit this vulnerability, an attacker would first have to log on to the system.

Security updates
10.0.17763.6775 — https://support.microsoft.com/help/5050008
10.0.20348.3091 — https://support.microsoft.com/help/5049983
10.0.19044.5371 — https://support.microsoft.com/help/5049981
10.0.22621.4751 — https://support.microsoft.com/help/5050021
10.0.26100.6584 — https://support.microsoft.com/help/5065426
10.0.26100.6508 — https://support.microsoft.com/help/5065474
10.0.25398.1369 — https://support.microsoft.com/help/5049984
10.0.10240.20890 — https://support.microsoft.com/help/5050013
10.0.14393.7699 — https://support.microsoft.com/help/5049993
6.2.9200.25273 — https://support.microsoft.com/help/5050004
6.3.9600.22371 — https://support.microsoft.com/help/5050048

Vulnerabilities 1

Revision history

  1. #2

    To comprehensively address CVE-2025-21293, Microsoft has released September 2025 security update KB5065426 for Windows Server 2025, Windows Server 2025 (Server Core installation), Windows 11 Version 24H2 for x64-based Systems, and Windows 11 Version 24H2 for ARM64-based Systems. Microsoft recommends that customers install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action. For customers running these versions of Windows and who install the HotPatch updates, Microsoft has released Hotpatch KB5065474. Customers who install the HotPatch updates should install KB5065474 to be protected from this vulnerability.

  2. #1

    Information published.

References