CVE-2025-21307

—

CVSS 3.1

9.8 critical

EPSS

2%p79

Published

Jan 14, 2025 (Jan 14, 2025)

Modified

Jun 17, 2026

Description

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Vendors: microsoft
Products: windows 10 1507, windows 10 1607, windows 10 1809, windows 10 21h2, windows 10 22h2, windows 11 22h2, windows 11 23h2, windows 11 24h2, windows server 2008, windows server 2012, windows server 2016, windows server 2019
Weakness: CWE-416
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news4 stories

3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security Update

The Hacker NewsJan 21, 15:30 UTC · Jan 21, 2025Exploit / PoC in the wildCVE-2024-7344 CVE-2025-21333 CVE-2025-21334+13 CVEs

60

Microsoft Patches Eight Zero

Infosecurity MagazineJan 15, 10:00 UTC · Jan 15, 2025Vulnerability in the wildCVE-2025-21333 CVE-2025-21334 CVE-2025-21335+8 CVEs

60

Microsoft fixes 159 vulnerabilities in first Patch Tuesday of 2025

CyberScoopJan 14, 21:55 UTC · Jan 14, 2025Vulnerability in the wildCVE-2025-21298 CVE-2025-21307 CVE-2025-21311+3 CVEs

60

Microsoft Patch Tuesday for January 2025 — Snort rules and prominent vulnerabilities

Cisco TalosJan 14, 21:15 UTC · Jan 14, 2025Vulnerability CVE-2025-21309 CVE-2025-21298 CVE-2025-21294+22 CVEs

60