CVE-2025-21270
Published: 14 January 2025
Summary
CVE-2025-21270 is a high-severity Uncontrolled Resource Consumption (CWE-400) vulnerability in Microsoft Windows 10 1507. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked in the top 19.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SC-5 (Denial-of-service Protection) and SC-6 (Resource Availability).
Deeper analysis
CVE-2025-21270 is a denial of service vulnerability in Microsoft Message Queuing (MSMQ) that carries a CVSS v3.1 score of 7.5 and is categorized under CWE-400. The flaw permits remote attackers to disrupt service availability without any authentication or user interaction required.
An unauthenticated attacker can exploit the issue over the network with low attack complexity, triggering a high impact on availability that can render the MSMQ component unresponsive. The published EPSS score shows a material rise from a low baseline to a peak of 0.0332, indicating emerging exploitation interest after disclosure.
Microsoft publishes mitigation details and patch guidance for this vulnerability through its Security Response Center advisory. No information on active in-the-wild exploitation is provided in the source data.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-2335
Vulnerability details
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
CVE enables remote exploitation of MSMQ to crash the service, directly matching application/system exploitation for endpoint DoS.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Requires timely flaw remediation, directly mitigating the MSMQ DoS vulnerability through patching as per Microsoft guidance.
Implements denial-of-service protections that prevent remote unauthenticated attackers from causing high availability impact via MSMQ exploitation.
Enforces resource allocation limits to counter the CWE-400 uncontrolled resource consumption leading to DoS in MSMQ.