CVE-2025-21202 | SynScan

Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2025-21202

Windows Recovery Environment Agent Elevation of Privilege Vulnerability

Published: Jan 14, 2025
Updated: May 4, 2025
CVE: CVE-2025-21202
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 6.1
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
microsoft / windows_server_2022_23h2	-	10.0.25398.1369
microsoft / windows_10_1607	-	10.0.14393.7699
microsoft / windows_10_1809	-	10.0.17763.6775
microsoft / windows_10_1507	-	10.0.10240.20890
microsoft / windows_10_21h2	-	10.0.19044.5371
microsoft / windows_10_22h2	-	10.0.19045.5371
microsoft / windows_11_22h2	-	10.0.22621.4751
microsoft / windows_11_23h2	-	10.0.22631.4751
microsoft / windows_11_24h2	-	10.0.26100.2894
microsoft / windows_server_2016	-	10.0.14393.7699
microsoft / windows_server_2019	-	10.0.17763.6775
microsoft / windows_server_2022	-	10.0.20348.3091
microsoft / windows_server_2025	-	10.0.26100.2894

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21202