CVE-2025-21379

CVE-2025-21379 is a Remote Code Execution vulnerability in the DHCP Client Service. Published on 2025-02-11T18:15:36.590, it carries a CVSS v3.1 base score of 7.1 (AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) and is linked to CWE-416 as well as NVD-CWE-noinfo.

Exploitation requires an attacker with adjacent network access (AV:A) and involves high attack complexity (AC:H), no privileges (PR:N), and user interaction (UI:R). Successful attacks result in high impacts to confidentiality, integrity, and availability (C:H/I:H/A:H) with unchanged scope (S:U), enabling remote code execution on affected systems.

The Microsoft Security Response Center provides guidance on this vulnerability, including patch information, at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21379.