CVE-2025-21270
High
Published: 14 January 2025
Published
14 January 2025
Modified
27 January 2025
KEV Added
—
Patch
—
CVSS Score
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.0131
79.9th percentile
Risk Priority
16
60% EPSS · 20% KEV · 20% CVSS
Description
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Security Summary
CVE-2025-21270 is a Denial of Service vulnerability in Microsoft Message Queuing (MSMQ). Published on 2025-01-14T18:15:46.503, it carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) and is associated with CWE-400 and NVD-CWE-noinfo.
Remote attackers require no privileges or user interaction to exploit this vulnerability over the network with low complexity. Successful exploitation leads to high availability impact, enabling denial of service without affecting confidentiality or integrity.
Microsoft provides mitigation guidance in its Security Update Guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21270.
Details
- CWE(s)
Affected Products
microsoft
windows 10 1507
≤ 10.0.10240.20890 · ≤ 10.0.10240.20890
microsoft
windows 10 1607
≤ 10.0.14393.7699 · ≤ 10.0.14393.7699
microsoft
windows 10 1809
≤ 10.0.17763.6775 · ≤ 10.0.17763.6775
microsoft
windows 10 21h2
≤ 10.0.19044.5371
microsoft
windows 10 22h2
≤ 10.0.19045.5371
microsoft
windows 11 22h2
≤ 10.0.22621.4751
microsoft
windows 11 23h2
≤ 10.0.22631.4751
microsoft
windows 11 24h2
≤ 10.0.26100.2894
microsoft
windows server 2008
all versions, r2
microsoft
windows server 2012
all versions, r2
+5 more product configuration(s) — see NVD for full list