CVE-2025-21198

—

CVSS 3.1

9.0 critical

EPSS

<1%p59

Published

Feb 11, 2025 (Feb 11, 2025)

Modified

Jun 17, 2026

Description

Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability

Vendors: microsoft
Products: hpc pack 2016, hpc pack 2019
Weakness: CWE-306
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news3 stories

Microsoft’s Patch Tuesday Fixes 63 Flaws, Including Two Under Active Exploitation

The Hacker NewsFeb 12, 10:28 UTC · Feb 12, 2025Vulnerability in the wildCVE-2025-21391 CVE-2025-21418 CVE-2024-38193+4 CVEs

60

Microsoft fixes 63 vulnerabilities, including 2 zero

CyberScoopFeb 11, 22:38 UTC · Feb 11, 2025Vulnerability in the wildCVE-2025-21391 CVE-2025-21418 CVE-2025-21400+3 CVEs

60

Microsoft Patch Tuesday for February 2025 — Snort rules and prominent vulnerabilities

Cisco TalosFeb 11, 19:24 UTC · Feb 11, 2025Vulnerability in the wildCVE-2025-21376 CVE-2025-21379 CVE-2025-21177+15 CVEs

60