CVE-2025-21224
Published: 14 January 2025
Description
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
Security Summary
CVE-2025-21224 is a Remote Code Execution vulnerability in the Windows Line Printer Daemon (LPD) Service. Published on 2025-01-14, it carries a CVSS v3.1 base score of 8.1 (High) with vector AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H and is associated with CWEs-416 (Use After Free) and CWE-591.
Unauthenticated remote attackers can exploit this vulnerability over the network with high attack complexity and no user interaction. Successful exploitation enables arbitrary code execution, resulting in high impacts to confidentiality, integrity, and availability.
Microsoft's update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21224 provides details on patching. Vicarius offers a detection script at https://www.vicarius.io/vsociety/posts/cve-2025-21224-remote-code-execution-vulnerability-in-windows-line-printer-daemon-service-detection-script and a mitigation script at https://www.vicarius.io/vsociety/posts/cve-2025-21224-remote-code-execution-vulnerability-in-windows-line-printer-daemon-service-mitigation-script.
Details
- CWE(s)