Summary
Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
What kind of security feature could be bypassed by successfully exploiting this vulnerability?
An authenticated attacker who successfully exploits the vulnerability could bypass the AdminLess security feature.
Security updates
10.0.17763.6893 — https://support.microsoft.com/help/5052000
10.0.20348.3207 — https://support.microsoft.com/help/5051979
10.0.20348.3148 — https://support.microsoft.com/help/5052106
10.0.19044.5487 — https://support.microsoft.com/help/5051974
10.0.22621.4890 — https://support.microsoft.com/help/5051989
10.0.26100.3194 — https://support.microsoft.com/help/5051987
10.0.26100.3107 — https://support.microsoft.com/help/5052105
10.0.25398.1425 — https://support.microsoft.com/help/5051980
10.0.10240.20915 — https://support.microsoft.com/help/5052040
10.0.14393.7785 — https://support.microsoft.com/help/5052006
6.0.6003.23117 — https://support.microsoft.com/help/5052038
6.0.6003.23117 — https://support.microsoft.com/help/5052072
6.1.7601.27566 — https://support.microsoft.com/help/5052016
6.1.7601.27566 — https://support.microsoft.com/help/5052032
6.2.9200.25317 — https://support.microsoft.com/help/5052020
6.3.9600.22417 — https://support.microsoft.com/help/5052042
Vulnerabilities 1
-
High 7.8
Windows Kernel Security Feature Bypass Vulnerability
Windows Kernel Security Feature Bypass Vulnerability
Revision history
-
#2
Updated FAQ information. This is an informational change only.
-
#1
Information published.
References
-
CVE-2025-21359 Windows Kernel Security Feature Bypass Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21359
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss