Cyber Posture

CVE-2025-53143

High

Published: 12 August 2025

Published
12 August 2025
Modified
18 August 2025
KEV Added
Patch
CVSS Score 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0613 90.9th percentile
Risk Priority 21 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-53143 is a high-severity Type Confusion (CWE-843) vulnerability in Microsoft Windows Server 2008. Its CVSS base score is 8.8 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation of Remote Services (T1210); ranked in the top 9.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-2 (Flaw Remediation) and CM-7 (Least Functionality).

Threat & Defense at a Glance

What attackers do: exploitation maps to Exploitation of Remote Services (T1210). What defenders deploy: see the NIST 800-53 controls recommended below.
Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

prevent

Directly remediates the type confusion vulnerability by requiring timely application of Microsoft patches for CVE-2025-53143 in Windows Message Queuing.

prevent

Implements memory protections like ASLR, DEP, and control-flow integrity that raise the bar for exploiting type confusion to achieve remote code execution.

prevent

Reduces attack surface by disabling or restricting nonessential Windows Message Queuing functionality, preventing low-privilege network access exploitation.

MITRE ATT&CK Enterprise TechniquesAI

T1210 Exploitation of Remote Services Lateral Movement
Adversaries may exploit remote services to gain unauthorized access to internal systems once inside of a network.
Why these techniques?

Type confusion in Windows Message Queuing service directly enables remote exploitation of the service for code execution (T1210).

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

NVD Description

Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.

Deeper analysisAI

CVE-2025-53143 is a type confusion vulnerability, classified under CWE-843 (Access of Resource Using Incompatible Type), affecting Windows Message Queuing. Published on 2025-08-12, it has a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating high severity due to its potential for significant impact across confidentiality, integrity, and availability.

An authorized attacker with low privileges can exploit this vulnerability over the network with low complexity and no user interaction required. Successful exploitation enables remote code execution on the targeted system.

Microsoft's Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53143 provides details on mitigation and available patches.

Details

CWE(s)

Affected Products

microsoft
windows 10 1507
≤ 10.0.10240.21100 · ≤ 10.0.10240.21100
microsoft
windows 10 1607
≤ 10.0.14393.8330 · ≤ 10.0.14393.8330
microsoft
windows 10 1809
≤ 10.0.17763.7678 · ≤ 10.0.17763.7678
microsoft
windows 10 21h2
≤ 10.0.19044.6216
microsoft
windows 10 22h2
≤ 10.0.19045.6216
microsoft
windows 11 22h2
≤ 10.0.22621.5768
microsoft
windows 11 23h2
≤ 10.0.22631.5768
microsoft
windows 11 24h2
≤ 10.0.26100.4851
microsoft
windows server 2008
all versions, r2
microsoft
windows server 2012
all versions, r2
+5 more product configuration(s) — see NVD for full list

CVEs Like This One

CVE-2025-53145Same product: Microsoft Windows 10 1507
CVE-2025-53144Same product: Microsoft Windows 10 1507
CVE-2025-21250Same product: Microsoft Windows 10 1507
CVE-2025-21246Same product: Microsoft Windows 10 1507
CVE-2025-21406Same product: Microsoft Windows 10 1507
CVE-2025-21236Same product: Microsoft Windows 10 1507
CVE-2025-21200Same product: Microsoft Windows 10 1507
CVE-2025-21295Same product: Microsoft Windows 10 1507
CVE-2025-21282Same product: Microsoft Windows 10 1507
CVE-2025-21306Same product: Microsoft Windows 10 1507

References