PT-2025-1210 · Microsoft · Access+1

Published 2025-01-14 · Updated 2025-07-01 · CVE-2025-21186

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

The issue at hand affects Microsoft Access, allowing remote attackers to execute arbitrary code and impact the system through a remote code execution exploit. Unfortunately, specific vulnerable versions of Microsoft Access are not provided in the given descriptions. It's crucial to ensure Microsoft Access is updated to prevent potential exploitation. More information about the exploit can be found on various security websites, but be sure to only visit trusted sources to avoid potential risks.

#MicrosoftAccess #RemoteCodeExecution #Microsoft #Exploit #CodeExecution #SecurityRisk #MicrosoftVulnerability #RemoteAttack #ArbitraryCodeExecution

Fix

RCE

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2025-00589

CVE-2025-21186

Affected Products

Access

Office Access

References · 11

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21186 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21186 · Security Note
• https://bdu.fstec.ru/vul/2025-00589 · Security Note
• https://osv.dev/vulnerability/CVE-2025-21186 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21186 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/716886 · Security Note
• https://t.me/cvenotify/127265 · Telegram Post
• https://t.me/true_secator/6620 · Telegram Post
• https://t.me/echeloneyes/3545 · Telegram Post
• https://reddit.com/r/Action1/comments/1i1d6m5/the_first_patch_tuesday_of_2025_is_here · Reddit Post
• https://twitter.com/outpost24/status/1879489449643421864 · Twitter Post