CVE-2025-21343
Published: 14 January 2025
Summary
CVE-2025-21343 is a high-severity Improper Privilege Management (CWE-269) vulnerability in Microsoft Windows 11 22H2. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Data from Local System (T1005); ranked in the top 9.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 AC-3 (Access Enforcement) and AC-6 (Least Privilege).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Timely flaw remediation through applying the Microsoft patch directly eliminates the information disclosure vulnerability in the Windows Web Threat Defense User Service.
Least privilege enforcement addresses the root cause of CWE-269 improper privilege management, preventing the service from disclosing sensitive information to unauthenticated remote attackers.
Access enforcement ensures the service authorizes and restricts logical access to sensitive information, blocking unauthorized remote disclosure.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The remote unauthenticated info disclosure in the Windows service directly facilitates collection of sensitive data from the local system.
NVD Description
Windows Web Threat Defense User Service Information Disclosure Vulnerability
Deeper analysisAI
CVE-2025-21343 is an information disclosure vulnerability in the Windows Web Threat Defense User Service. Published on 2025-01-14, it carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) and is associated with CWE-269 (Improper Privilege Management) and NVD-CWE-noinfo.
The vulnerability allows a remote unauthenticated attacker to exploit the service over the network with low attack complexity and no user interaction required. Successful exploitation results in high-impact disclosure of sensitive information, with no impact on integrity or availability.
Microsoft's advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21343 provides details on mitigation and available patches.
Details
- CWE(s)