PT-2025-4215 · Microsoft · Windows Digital Media+1

Adel + 1 · Published 2025-01-14 · Updated 2025-01-22 · CVE-2025-21327

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Digital Media (affected versions not specified)

Description The issue is an elevation-of-privilege vulnerability that allows attackers to affect the system. This means an attacker could potentially gain increased access or control over the system, but specific details about the vulnerability, such as the estimated number of potentially affected devices or real-world incidents, are not provided.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-21327

Affected Products

Windows

Windows Digital Media

References · 5

• https://osv.dev/vulnerability/CVE-2025-21327 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21327 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21327 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-21327 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21327 · Security Note