← Back

CVE-2025-21313

nvd nist
Published: Jan 14, 2025Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: secure@microsoft.com (Secondary)

Description

Windows Security Account Manager (SAM) Denial of Service Vulnerability

Affected (3)

Microsoft
3 products
Windows 11 24h2
Windows Server 2022 23h2
Windows Server 2025
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Windows 11 24h2
Before 10.0.26100.2894
Windows Server 2022 23h2
Before 10.0.25398.1369
Windows Server 2025
Before 10.0.26100.2894

Related CWEs

CWE-833
Deadlock
The product contains multiple threads or executable segments that are waiting for each other to release a necessary lock, resulting in deadlock.

References (1)

Source: secure@microsoft.com
Vendor Advisory

Timeline

No history available yet.