CVE-2025-21275: Windows App Package Installer Elevation of Privilege Vulnerability
Published Jan 14, 2025
·Updated
Windows App Package Installer Elevation of Privilege Vulnerability
Affected Software
25 affected componentsFixes available
Microsoft Windows Server 2025
Microsoft Windows Server 2025
Microsoft Windows Server 2022, 23H2 Edition
Microsoft Windows 11=23H2
Microsoft Windows 11=22H2
Microsoft Windows 11=22H2
Microsoft Windows 11=24H2
Microsoft Windows 11=24H2
Microsoft Windows 11=23H2
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Windows 10 21h2<10.0.19044.5371
Microsoft Windows 10 22h2<10.0.19045.5371
Microsoft Windows 11 22h2<10.0.22621.4751
Microsoft Windows 11 23h2<10.0.22631.4751
Microsoft Windows 11 24h2<10.0.26100.2894
Microsoft Windows Server 2022<10.0.20348.3091
Microsoft Windows Server 2022 23h2<10.0.25398.1369
Microsoft Windows Server 2025<10.0.26100.2894
Microsoft Windows 10=22H2
Microsoft Windows 10=22H2
Microsoft Windows 10=22H2
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Remediation
Event History
Jan 14, 2025
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·06:04 PM
Data Sourced
via MITRE·06:04 PM
DescriptionSeverity
News Published
via Dark Reading·10:56 PM
News Published
via Dark Reading·11:00 PM
Jan 20, 2025
Known Exploited
10:24 AM
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2025-21275?
CVE-2025-21275 has been rated as a medium severity vulnerability.
2
How do I fix CVE-2025-21275?
To fix CVE-2025-21275, install the applicable security updates provided by Microsoft for your affected Windows version.
3
Which versions of Windows are affected by CVE-2025-21275?
CVE-2025-21275 affects multiple versions of Windows including Windows 10, Windows 11, and Windows Server 2022, 2025.
4
What type of vulnerability is CVE-2025-21275?
CVE-2025-21275 is classified as an elevation of privilege vulnerability.
5
Can CVE-2025-21275 affect both desktop and server editions of Windows?
Yes, CVE-2025-21275 can affect both desktop versions like Windows 10 and Windows 11 and server editions like Windows Server 2022 and 2025.