PT-2025-1152 · Microsoft · Windows

Kyle Westhaus · Published 2025-01-14 · Updated 2025-11-13 · CVE-2025-21307

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows (affected versions not specified)

Description The issue affects Microsoft Windows, specifically the Windows Reliable Multicast Transport Driver (RMCAST), allowing remote attackers to execute arbitrary code and impact the system through a remote code execution exploit. The severity of this issue is increased, and it can potentially affect a significant number of users. The vulnerability is related to the use of memory after it has been freed, which can be exploited by remote attackers to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-00433

CVE-2025-21307

Affected Products

Windows

References · 16

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21307 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21307 · Security Note
• https://bdu.fstec.ru/vul/2025-00433 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-21307 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/716911 · Security Note
• https://osv.dev/vulnerability/CVE-2025-21307 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21307 · Security Note
• https://twitter.com/vuldb/status/1879252407252815978 · Twitter Post
• https://vuldb.com/?id.291752 · Note
• https://t.me/avleonovcom/1497 · Telegram Post
• https://twitter.com/CVEnew/status/1879290768466104420 · Twitter Post
• https://t.me/echeloneyes/3545 · Telegram Post
• https://twitter.com/transilienceai/status/1887486023690547528 · Twitter Post
• https://twitter.com/transilienceai/status/1887112832556097565 · Twitter Post
• https://twitter.com/transilienceai/status/1887844557565374805 · Twitter Post