CVE-2025-21194 (GCVE-0-2025-21194)
Vulnerability from cvelistv5
Published
2025-02-11 17:58
Modified
2025-03-12 01:42
Severity ?
7.1 (High) - CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CWE
  • CWE-20 - Improper Input Validation
Summary
Microsoft Surface Security Feature Bypass Vulnerability
References
Impacted products
Vendor Product Version
Microsoft Surface Laptop 4 with Intel Processor Version: N/A
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-21194",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-11T19:16:42.644260Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-11T19:28:13.429Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Surface Laptop 4 with Intel Processor",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Surface Laptop Go",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Surface Go",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Surface Laptop Go 3",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Surface Laptop 4 with AMD Processor",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Surface Pro",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Surface Hub",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Surface Laptop 3 with Intel Processor",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Surface Pro 8",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Surface Windows Dev Kit",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Surface Pro 9 ARM",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:microsoft:surface_laptop_4_intel_processor:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:h:microsoft:surface_laptop_go_2:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:h:microsoft:surface_go_3:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:h:microsoft:surface_laptop_go_3:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:h:microsoft:surface_laptop_4_AMD_processor:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:h:microsoft:surface_pro_7:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:h:microsoft:surface_hub_2S:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:h:microsoft:surface_laptop_3_intel_processor:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:h:microsoft:surface_go_2:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:h:microsoft:surface_pro_8:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:h:microsoft:surface_windows_dev_kit:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:h:microsoft:surface_pro_9_ARM:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2025-02-11T08:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Microsoft Surface Security Feature Bypass Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-12T01:42:24.382Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft Surface Security Feature Bypass Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21194"
        }
      ],
      "title": "Microsoft Surface Security Feature Bypass Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2025-21194",
    "datePublished": "2025-02-11T17:58:25.882Z",
    "dateReserved": "2024-12-05T21:43:30.766Z",
    "dateUpdated": "2025-03-12T01:42:24.382Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-21194\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2025-02-11T18:15:30.820\",\"lastModified\":\"2025-07-08T14:14:50.187\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Microsoft Surface Security Feature Bypass Vulnerability\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de omisi\u00f3n de funciones de seguridad de Microsoft Surface\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.2,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_hub_2s_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0373B077-9CDC-4D56-9180-53DD54D6C3D8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_hub_2s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5126D18E-4EFC-43CF-8243-895034C8FADC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_pro_8_for_business_1983_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"17896CFB-0B7D-456A-8A82-A971C3B5F072\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_pro_8_for_business_1983:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8FBD2702-436C-4EB6-8F7F-4D65DFC9CCFA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_laptop_go_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4FD9969-A47F-4F34-8775-07107C4B0557\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_laptop_go:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4751A72E-1E1A-455D-A179-F9936A9F87FA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_laptop_go_2_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FC33B563-7807-4AB3-8887-D228B1F60437\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_laptop_go_2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E160CD9-BE19-4900-81E4-61BC6050215B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_hub_3_50_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EECA9AFD-5144-4B18-B4EF-DF1541FC9564\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_hub_3_50:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F56EC8E-E144-4D8F-B224-A7E6FA659437\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_hub_2s_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0373B077-9CDC-4D56-9180-53DD54D6C3D8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_hub_2s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5126D18E-4EFC-43CF-8243-895034C8FADC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_pro_7\\\\+_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F9A5CB11-7AE2-47C0-A029-998B9C98E12E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_pro_7\\\\+:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D80D94B4-E68D-4DFF-A5AA-D6E183AC7579\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_laptop_go_3_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F0D8F8A2-837E-452B-8AD2-BA2A511D5C18\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_laptop_go_3:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9AD4AE51-45EE-43E8-ABC2-72E365354022\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_go_3_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DCE166FE-D173-4E62-8AA0-C80C0E4D8820\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_go_3:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EDAC37E4-8768-4207-A8B8-6D68D52AABF9\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_laptop_go_2_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FC33B563-7807-4AB3-8887-D228B1F60437\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_laptop_go_2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E160CD9-BE19-4900-81E4-61BC6050215B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_pro_9_with_5g_1997_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3CD49D37-90B1-4C07-83D6-80A3B60BFD93\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_pro_9_with_5g_1997:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"384F730B-E216-4C4E-A95A-15D1F84613CC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_pro_9_with_5g_1996_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"23755029-6C52-4F4B-A4E0-C2CC810BAD2E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_pro_9_with_5g_1996:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"48465AD2-8B10-4185-8C1D-265E835584C4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_laptop_3_1867_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5805C772-1C4A-4A48-9394-00DBDAD7DEB6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_laptop_3_1867:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7392E4DC-D40E-4F78-A086-F77C8AA9B452\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_laptop_3_1872_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"57C48B0F-2062-43DB-BAFD-C0C847DE1102\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_laptop_3_1872:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9E22D67D-CEE6-4F23-9B7D-25B5717F1817\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_laptop_4_1958_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1DB5B208-C22B-4A1D-832C-29B693F35586\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_laptop_4_1958:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2CD2054E-1098-4BEA-BA95-8430BF28192E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_laptop_4_1950_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5AA3D6B9-DD55-4CBD-A1E5-0737E3538A09\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_laptop_4_1950:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D6C3A0E0-6485-411B-BC31-1A8A275CB034\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_laptop_4_1952_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB6C780C-DDCE-447D-978C-57115EBBF4B9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_laptop_4_1952:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6110417B-F51F-42B3-95F9-AD7D6398FED3\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_laptop_4_1978_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF2D920B-D1C3-4F79-AC91-14C3C61D7A0C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_laptop_4_1978:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"82E9E481-0326-4229-A8A7-84DE0D095425\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_dev_kit_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3FDBEB11-868E-4176-9DA4-F0C9CEEA7CC2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:windows_dev_kit:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"85AD5792-45EA-48DD-8706-85841DDFB12F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_hub_2s_85_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF8F1CF9-94CF-4634-9851-65CF1C67A6AC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_hub_2s_85:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6D8102C-03E0-49E9-BA39-0F72E30C6304\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_hub_3_50_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EECA9AFD-5144-4B18-B4EF-DF1541FC9564\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_hub_3_50:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F56EC8E-E144-4D8F-B224-A7E6FA659437\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_hub_3_85_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A3A16E8-2056-4650-BE5C-30B84E2AB848\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_hub_3_85:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"14066FEE-0F3B-4271-BC68-80ECD53DA4DC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_pro_8_1983_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E94C16E-94D9-4273-B8C8-BC57762F8367\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_pro_8_1983:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A187D45-BB47-4667-ADFE-8B9E823F221B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_pro_8_for_business_with_lte_advanced_1982_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B2C9AC0B-1A29-4D57-A26D-AE7B8120EB19\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_pro_8_for_business_with_lte_advanced_1982:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"262D30D4-449E-47BB-9678-9F371B28DCF5\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_hub_3_85_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A3A16E8-2056-4650-BE5C-30B84E2AB848\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_hub_3_85:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"14066FEE-0F3B-4271-BC68-80ECD53DA4DC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_hub_2s_85_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF8F1CF9-94CF-4634-9851-65CF1C67A6AC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_hub_2s_85:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6D8102C-03E0-49E9-BA39-0F72E30C6304\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_go_3_1926_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6CF69EC7-C430-48EA-8E4F-3C392D1AFCA3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_go_3_1926:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E8EA8E7D-17E8-4E7A-B4A4-A208DC329FDB\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_go_3_1901_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3CB6A413-CB85-4A53-B851-20CD13B93688\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_go_3_1901:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD1750C1-2FDE-4A84-81D8-F57DE7E24974\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_go_3_2022_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"222EC78A-597B-4D14-BE1F-82102C0BB0B4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_go_3_2022:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21C3A91A-3394-45DE-8932-5431EE8BFC99\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_go_2_1926_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA077CA3-7A69-4226-AAD8-2BC199961704\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_go_2_1926:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80BE3894-3006-48E4-8DE9-9B059A05DCC4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_go_2_1901_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1CEF91B1-F29A-4F81-BAC9-6B93BBC5D749\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_go_2_1901:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F33EDF2-9058-4329-BBF6-2FCE80433F5B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:surface_go_2_1927_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1549BEF0-C1C6-4D1A-9662-1FB6672DBF69\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:surface_go_2_1927:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"32B48180-38CB-4C0E-BAF0-B99ACE575CFC\"}]}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21194\",\"source\":\"secure@microsoft.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-21194\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-02-11T19:16:42.644260Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-02-11T19:16:44.362Z\"}}], \"cna\": {\"title\": \"Microsoft Surface Security Feature Bypass Vulnerability\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.1, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Microsoft\", \"product\": \"Surface Laptop 4 with Intel Processor\", \"versions\": [{\"status\": \"affected\", \"version\": \"N/A\"}], \"platforms\": [\"Unknown\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Surface Laptop Go\", \"versions\": [{\"status\": \"affected\", \"version\": \"N/A\"}], \"platforms\": [\"Unknown\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Surface Go\", \"versions\": [{\"status\": \"affected\", \"version\": \"N/A\"}], \"platforms\": [\"Unknown\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Surface Laptop Go 3\", \"versions\": [{\"status\": \"affected\", \"version\": \"N/A\"}], \"platforms\": [\"Unknown\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Surface Laptop 4 with AMD Processor\", \"versions\": [{\"status\": \"affected\", \"version\": \"N/A\"}], \"platforms\": [\"Unknown\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Surface Pro\", \"versions\": [{\"status\": \"affected\", \"version\": \"N/A\"}], \"platforms\": [\"Unknown\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Surface Hub\", \"versions\": [{\"status\": \"affected\", \"version\": \"N/A\"}], \"platforms\": [\"Unknown\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Surface Laptop 3 with Intel Processor\", \"versions\": [{\"status\": \"affected\", \"version\": \"N/A\"}], \"platforms\": [\"Unknown\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Surface Pro 8\", \"versions\": [{\"status\": \"affected\", \"version\": \"N/A\"}], \"platforms\": [\"Unknown\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Surface Windows Dev Kit\", \"versions\": [{\"status\": \"affected\", \"version\": \"N/A\"}], \"platforms\": [\"Unknown\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Surface Pro 9 ARM\", \"versions\": [{\"status\": \"affected\", \"version\": \"N/A\"}], \"platforms\": [\"Unknown\"]}], \"datePublic\": \"2025-02-11T08:00:00.000Z\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21194\", \"name\": \"Microsoft Surface Security Feature Bypass Vulnerability\", \"tags\": [\"vendor-advisory\"]}], \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Microsoft Surface Security Feature Bypass Vulnerability\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-20\", \"description\": \"CWE-20: Improper Input Validation\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:h:microsoft:surface_laptop_4_intel_processor:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"N/A\"}, {\"criteria\": \"cpe:2.3:h:microsoft:surface_laptop_go_2:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"N/A\"}, {\"criteria\": \"cpe:2.3:h:microsoft:surface_go_3:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"N/A\"}, {\"criteria\": \"cpe:2.3:h:microsoft:surface_laptop_go_3:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"N/A\"}, {\"criteria\": \"cpe:2.3:h:microsoft:surface_laptop_4_AMD_processor:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"N/A\"}, {\"criteria\": \"cpe:2.3:h:microsoft:surface_pro_7:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"N/A\"}, {\"criteria\": \"cpe:2.3:h:microsoft:surface_hub_2S:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"N/A\"}, {\"criteria\": \"cpe:2.3:h:microsoft:surface_laptop_3_intel_processor:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"N/A\"}, {\"criteria\": \"cpe:2.3:h:microsoft:surface_go_2:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"N/A\"}, {\"criteria\": \"cpe:2.3:h:microsoft:surface_pro_8:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"N/A\"}, {\"criteria\": \"cpe:2.3:h:microsoft:surface_windows_dev_kit:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"N/A\"}, {\"criteria\": \"cpe:2.3:h:microsoft:surface_pro_9_ARM:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"N/A\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\", \"dateUpdated\": \"2025-03-12T01:42:24.382Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-21194\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-03-12T01:42:24.382Z\", \"dateReserved\": \"2024-12-05T21:43:30.766Z\", \"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"datePublished\": \"2025-02-11T17:58:25.882Z\", \"assignerShortName\": \"microsoft\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.