CVE-2025-21194: Microsoft Surface Security Feature Bypass Vulnerability
Published Feb 11, 2025
·Updated
Microsoft Surface Security Feature Bypass Vulnerability
Affected Software
69 affected components
Microsoft Surface Hub
Microsoft Surface Hub 3
Microsoft Surface Windows Dev Kit
Microsoft Surface Pro 8
Microsoft Surface Hub 2S
Microsoft Surface Pro 7+
Microsoft Surface Go 3
Microsoft Surface Laptop 3 with Intel Processor
Microsoft Surface Laptop 4 with Intel Processor
Microsoft Surface Laptop 4 with AMD Processor
Microsoft Surface Pro 9 ARM
Microsoft Surface Laptop Go 2
Microsoft Surface Laptop Go
Microsoft Surface Go 2
Microsoft Surface Laptop Go 3
All of the following
Microsoft Surface Hub 2s Firmware
Microsoft Surface Hub 2S
All of the following
Microsoft Surface Pro 8 For Business 1983 Firmware
Microsoft Surface Pro 8 For Business 1983
All of the following
Microsoft Surface Laptop Go Firmware
Microsoft Surface Laptop Go
All of the following
Microsoft Surface Laptop Go 2 Firmware
Microsoft Surface Laptop Go 2
All of the following
Microsoft Surface Hub 3 50 Firmware
Microsoft Surface Hub 3 50
All of the following
Microsoft Surface Pro 7\+ Firmware
Microsoft Surface Pro 7\+
All of the following
Microsoft Surface Laptop Go 3 Firmware
Microsoft Surface Laptop Go 3
All of the following
Microsoft Surface Go 3 Firmware
Microsoft Surface Go 3
All of the following
Microsoft Surface Pro 9 With 5g 1997 Firmware
Microsoft Surface Pro 9 With 5g 1997
All of the following
Microsoft Surface Pro 9 With 5g 1996 Firmware
Microsoft Surface Pro 9 With 5g 1996
All of the following
Microsoft Surface Laptop 3 1867 Firmware
Microsoft Surface Laptop 3 1867
All of the following
Microsoft Surface Laptop 3 1872 Firmware
Microsoft Surface Laptop 3 1872
All of the following
Microsoft Surface Laptop 4 1958 Firmware
Microsoft Surface Laptop 4 1958
All of the following
Microsoft Surface Laptop 4 1950 Firmware
Microsoft Surface Laptop 4 1950
All of the following
Microsoft Surface Laptop 4 1952 Firmware
Microsoft Surface Laptop 4 1952
All of the following
Microsoft Surface Laptop 4 1978 Firmware
Microsoft Surface Laptop 4 1978
All of the following
Microsoft Windows Dev Kit Firmware
Microsoft Windows Dev Kit
All of the following
Microsoft Surface Hub 2s 85 Firmware
Microsoft Surface Hub 2s 85
All of the following
Microsoft Surface Hub 3 85 Firmware
Microsoft Surface Hub 3 85
All of the following
Microsoft Surface Pro 8 1983 Firmware
Microsoft Surface Pro 8 1983
All of the following
Microsoft Surface Pro 8 For Business With Lte Advanced 1982 Firmware
Microsoft Surface Pro 8 For Business With Lte Advanced 1982
All of the following
Microsoft Surface Go 3 1926 Firmware
Microsoft Surface Go 3 1926
All of the following
Microsoft Surface Go 3 1901 Firmware
Microsoft Surface Go 3 1901
All of the following
Microsoft Surface Go 3 2022 Firmware
Microsoft Surface Go 3 2022
All of the following
Microsoft Surface Go 2 1926 Firmware
Microsoft Surface Go 2 1926
All of the following
Microsoft Surface Go 2 1901 Firmware
Microsoft Surface Go 2 1901
All of the following
Microsoft Surface Go 2 1927 Firmware
Microsoft Surface Go 2 1927
Event History
Feb 11, 2025
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·05:58 PM
Data Sourced
via MITRE·05:58 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
News Published
via Dark Reading·09:55 PM
News Published
via Dark Reading·10:24 PM
Feb 12, 2025
News Published
via The Register·02:58 AM
Feb 16, 2025
News Published
via The Register·03:01 AM
Known Exploited
03:01 AM
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2025-21194?
CVE-2025-21194 has been classified as a security feature bypass vulnerability.
2
How do I fix CVE-2025-21194?
To fix CVE-2025-21194, users should apply the latest security updates provided by Microsoft for their affected Surface devices.
3
Which Microsoft products are affected by CVE-2025-21194?
CVE-2025-21194 affects various Microsoft Surface products including Surface Hub, Surface Laptop Go, and Surface Pro models.
4
What could happen if CVE-2025-21194 is exploited?
If CVE-2025-21194 is exploited, it could allow an attacker to bypass security measures and potentially compromise the affected Surface devices.
5
Is CVE-2025-21194 a widespread vulnerability?
CVE-2025-21194 affects specific Microsoft Surface products but may not be considered widespread across all Microsoft systems.