CVE-2025-21376

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122CWE-191CWE-362

Affected software

No affected versions have been published.

Timeline

Published
Feb 11, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-213776.5NTLM Hash Disclosure Spoofing VulnerabilityCVE-2025-213787.8Windows CSC Service Elevation of Privilege VulnerabilityCVE-2025-213797.1DHCP Client Service Remote Code Execution VulnerabilityCVE-2025-21383.5IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete commenCVE-2025-213806.5Improper access control in Azure SaaS Resources allows an authorized attacker to disclose information over a network.CVE-2025-213817.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2025-213827.8Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2025-213835.5Microsoft Excel Information Disclosure VulnerabilityCVE-2025-213848.8An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privilegeCVE-2025-213856.5A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Purview allows an authorized attacker to disclose information over a networkCVE-2025-213867.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2025-213877.8Microsoft Excel Remote Code Execution Vulnerability