CVE-2025-21344

CVE-2025-21344 is a Remote Code Execution vulnerability in Microsoft SharePoint Server. Published on 2025-01-14T18:16:00.227, it carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and is associated with CWE-20 (Improper Input Validation) and NVD-CWE-noinfo.

The vulnerability requires local access (AV:L) with low attack complexity (AC:L) and no privileges (PR:N), but user interaction is necessary (UI:R). An attacker could exploit it to achieve high impacts on confidentiality, integrity, and availability (C:H/I:H/A:H) within the same security scope (S:U), potentially executing arbitrary code on the affected system.

The Microsoft Security Response Center advisory provides details on mitigation and patching at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21344.