CVE-2025-21194

CVE-2025-21194 is a security feature bypass vulnerability affecting Microsoft Surface devices. Published on 2025-02-11, it carries a CVSS v3.1 base score of 7.1 (High), with vector AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H. The issue is linked to CWE-20 (Improper Input Validation) and lacks additional CWE details from NVD.

An attacker on an adjacent network can exploit this vulnerability with no privileges required but must overcome high attack complexity and rely on user interaction. Successful exploitation enables high-impact consequences, including unauthorized access to confidential data, modification of system integrity, and disruption of availability, effectively bypassing security features on the affected Microsoft Surface component.

For mitigation details, security practitioners should refer to the official Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21194.