ByteOS Network

NVD Vulnerability Details :

CVE-2025-21180

Analyzed

More Info Official Page

Source-secure@microsoft.com

Published At-11 Mar, 2025 | 17:16

Updated At-03 Jul, 2025 | 15:04

Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CPE Matches

Microsoft Corporation

>>windows_10_1507>>Versions before 10.0.10240.20947(exclusive)

cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*

Microsoft Corporation

>>windows_10_1507>>Versions before 10.0.10240.20947(exclusive)

cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*

Microsoft Corporation

>>windows_10_1607>>Versions before 10.0.14393.7876(exclusive)

cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*

Microsoft Corporation

>>windows_10_1607>>Versions before 10.0.14393.7876(exclusive)

cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*

Microsoft Corporation

>>windows_10_1809>>Versions before 10.0.17763.7009(exclusive)

cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*

Microsoft Corporation

>>windows_10_1809>>Versions before 10.0.17763.7009(exclusive)

cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*

Microsoft Corporation

>>windows_10_21h2>>Versions before 10.0.19044.5608(exclusive)

cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_10_22h2>>Versions before 10.0.19045.5608(exclusive)

cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_11_22h2>>Versions before 10.0.22621.5039(exclusive)

cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_11_23h2>>Versions before 10.0.22631.5039(exclusive)

cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_11_24h2>>Versions before 10.0.26100.3403(exclusive)

cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_11_24h2>>Versions between 10.0.26100.3403(exclusive) and 10.0.26100.3476(exclusive)

cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2008>>-

cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*

Microsoft Corporation

>>windows_server_2008>>-

cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*

Microsoft Corporation

>>windows_server_2008>>r2

cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*

Microsoft Corporation

>>windows_server_2012>>-

cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2012>>r2

cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2016>>Versions before 10.0.14393.7876(exclusive)

cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2019>>Versions before 10.0.17763.7009(exclusive)

cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2022>>Versions before 10.0.20348.3270(exclusive)

cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2022_23h2>>Versions before 10.0.25398.1486(exclusive)

cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2025>>Versions before 10.0.26100.3403(exclusive)

cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2025>>Versions between 10.0.26100.3403(exclusive) and 10.0.26100.3476(exclusive)

cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-122	Secondary	secure@microsoft.com

References

Hyperlink	Source	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21180	secure@microsoft.com	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History