CVE-2025-21395
Published: 14 January 2025
Summary
CVE-2025-21395 is a high-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Microsoft Office Long Term Servicing Channel. Its CVSS base score is 7.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked in the top 16.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-16 (Memory Protection) and SI-2 (Flaw Remediation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly remediates the Microsoft Access heap-based buffer overflow vulnerability by requiring timely identification, reporting, and patching of flaws like CVE-2025-21395.
Implements memory protections such as DEP, ASLR, and stack canaries that directly mitigate unauthorized code execution from heap buffer overflows (CWE-122) in Microsoft Access.
Deploys anti-malware tools to scan and block malicious Access files or detect code execution attempts exploiting the vulnerability.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Client-side RCE in Microsoft Access via malicious file requiring user interaction directly enables T1203 (Exploitation for Client Execution) and T1204.002 (Malicious File).
NVD Description
Microsoft Access Remote Code Execution Vulnerability
Deeper analysisAI
CVE-2025-21395 is a Remote Code Execution vulnerability affecting Microsoft Access. Published on 2025-01-14, it carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and is associated with CWE-122 and NVD-CWE-noinfo.
Exploitation requires local access with low complexity and no privileges, but user interaction is necessary. A local attacker could leverage this to execute arbitrary code, resulting in high impacts to confidentiality, integrity, and availability on the affected system.
The Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21395 provides details on mitigation and patching guidance.
Details
- CWE(s)