5.5
CVSSv3

CVE-2025-21374

CVSSv4: NA | CVSSv3: 5.5 | CVSSv2: NA | VMScore: 650 | EPSS: 0.00054 | KEV: Not Included
Published: 14/01/2025 Updated: 17/01/2025

Vulnerability Summary

Information Disclosure in Windows CSC Service

There is an information disclosure vulnerability in the Windows CSC Service.

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows 10 version 1809

microsoft windows server 2019

microsoft windows server 2019 (server core installation)

microsoft windows server 2022

microsoft windows 10 version 21h2

microsoft windows 11 version 22h2

microsoft windows 10 version 22h2

microsoft windows server 2025 (server core installation)

microsoft windows 11 version 22h3

microsoft windows 11 version 23h2

microsoft windows server 2022, 23h2 edition (server core installation)

microsoft windows 11 version 24h2

microsoft windows server 2025

microsoft windows 10 version 1507

microsoft windows 10 version 1607

microsoft windows server 2016

microsoft windows server 2016 (server core installation)

microsoft windows server 2012

microsoft windows server 2012 (server core installation)

microsoft windows server 2012 r2

microsoft windows server 2012 r2 (server core installation)

microsoft windows 10 1809

microsoft windows 10 21H2

microsoft windows 11 22H2

microsoft windows 10 22H2

microsoft windows 11 23H2

microsoft windows server 23h2

microsoft windows 11 24H2

microsoft windows 10 1507

microsoft windows 10 1607

microsoft windows server 2012 R2

microsoft windows 10 21h2

microsoft windows 10 22h2

microsoft windows 11 22h2

microsoft windows 11 23h2

microsoft windows 11 24h2

microsoft windows server 2012 -

microsoft windows server 2022 23h2

Recent Articles

Microsoft January 2025 Patch Tuesday fixes 8 zero-days, 159 flaws
BleepingComputer • Lawrence Abrams • 14 Jan 2025

Microsoft January 2025 Patch Tuesday fixes 8 zero-days, 159 flaws By Lawrence Abrams January 14, 2025 02:01 PM 0 .crit { font-weight:bold; color:red; } .article_section td { font-size: 14px!important; } Today is Microsoft's January 2025 Patch Tuesday, which includes security updates for 159 flaws, including eight zero-day vulnerabilities, with three actively exploited in attacks. This Patch Tuesday also fixes twelve "Critical" vulnerabilities, including information disclosure, privileges el...