CVE-2025-21395
Published: 14 January 2025
Description
Microsoft Access Remote Code Execution Vulnerability
Security Summary
CVE-2025-21395 is a Remote Code Execution vulnerability affecting Microsoft Access. Published on 2025-01-14, it carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and is associated with CWE-122 and NVD-CWE-noinfo.
Exploitation requires local access with low complexity and no privileges, but user interaction is necessary. A local attacker could leverage this to execute arbitrary code, resulting in high impacts to confidentiality, integrity, and availability on the affected system.
The Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21395 provides details on mitigation and patching guidance.
Details
- CWE(s)