CVEvulnerability

CVE-2025-21194

7.1 HIGH Published 2025-02-11 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-02-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.1 HIGH — CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-20

Description

Microsoft Surface Security Feature Bypass Vulnerability

Affected configurations

• microsoft surface hub 2s firmware • microsoft surface pro 8 for business 1983 firmware • microsoft surface laptop go firmware • microsoft surface laptop go 2 firmware • microsoft surface hub 3 50 firmware • microsoft surface pro 7\+ firmware • microsoft surface laptop go 3 firmware • microsoft surface go 3 firmware • microsoft surface pro 9 with 5g 1997 firmware • microsoft surface pro 9 with 5g 1996 firmware • microsoft surface laptop 3 1867 firmware • microsoft surface laptop 3 1872 firmware • microsoft surface laptop 4 1958 firmware • microsoft surface laptop 4 1950 firmware • microsoft surface laptop 4 1952 firmware • microsoft surface laptop 4 1978 firmware • microsoft windows dev kit firmware • microsoft surface hub 2s 85 firmware • microsoft surface hub 3 85 firmware • microsoft surface pro 8 1983 firmware • microsoft surface pro 8 for business with lte advanced 1982 firmware • microsoft surface go 3 1926 firmware • microsoft surface go 3 1901 firmware • microsoft surface go 3 2022 firmware • microsoft surface go 2 1926 firmware • microsoft surface go 2 1901 firmware • microsoft surface go 2 1927 firmware

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References