ID:11342 - Exploit for Link following in Windows Server and Windows - CVE-2025-21204

 
Main Vulnerability Database Exploits ID:11342 - Exploit for Link following in Windows Server and Windows - CVE-2025-21204

ID:11342 - Exploit for Link following in Windows Server and Windows - CVE-2025-21204

Published: April 25, 2025


Vulnerability identifier: #VU107196
Vulnerability risk: Low
CVE-ID: CVE-2025-21204
CWE-ID: CWE-59
Exploitation vector: Local access
Vulnerable software:
Windows Server
Windows

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insecure link following in Windows Process Activation. A local user can gain elevated privileges on the target system.


Remediation

Install update from vendor's website.