MapUrlToZone Security Feature Bypass Vulnerability

🗓️ 14 Jan 2025 08:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 10 Views

Vulnerability in Microsoft MapUrlToZone allows bypassing security features in applications.

Reporter	Title	Published	Views	Family All 41
Information Security Automation	January Microsoft Patch Tuesday	14 Jan 202523:22	–	avleonov
Circl	CVE-2025-21268	14 Jan 202517:29	–	circl
CNNVD	Microsoft MapUrlToZone 安全漏洞	14 Jan 202500:00	–	cnnvd
CVE	CVE-2025-21268	14 Jan 202518:03	–	cve
Cvelist	CVE-2025-21268 MapUrlToZone Security Feature Bypass Vulnerability	14 Jan 202518:03	–	cvelist
EUVD	EUVD-2025-2333	3 Oct 202520:07	–	euvd
Microsoft KB	January 14, 2025—KB5049983 (OS Build 20348.3091)	14 Jan 202508:00	–	mskb
Microsoft KB	January 14, 2025—KB5049984 (OS Build 25398.1369)	14 Jan 202508:00	–	mskb
Microsoft KB	KB5049994: Cumulative security update for Internet Explorer: January 14, 2025	14 Jan 202508:00	–	mskb
Microsoft KB	January 14, 2025—KB5050004 (Monthly Rollup)	14 Jan 202508:00	–	mskb

Vulners

Node

microsoft windows_10_21h2Range<10.0.19044.5371x64

OR

microsoft windows_10_21h2Range<10.0.19044.5371x64

OR

microsoft windows_10_21h2Range<10.0.19044.5371x86

OR

microsoft windows_server_2022Range<10.0.20348.3091

OR

microsoft windows_server_2022Range<10.0.20348.3091

OR

microsoft windows_server_2019Range<10.0.17763.6775

OR

microsoft windows_server_2019Range<10.0.17763.6775

OR

microsoft windows_server_2012_r2Range<6.3.9600.22371x64

OR

microsoft windows_server_2012_r2Range<1.002x64

OR

microsoft windows_server_2012_r2Range<6.3.9600.22371x64

OR

microsoft windows_server_2012_r2Range<1.002x64

OR

microsoft windows_server_2012Range<6.2.9200.25273x64

OR

microsoft windows_server_2012Range<1.003x64

OR

microsoft windows_server_2012Range<6.2.9200.25273x64

OR

microsoft windows_server_2012Range<1.003x64

OR

microsoft windows_server_2008_r2Range<6.1.7601.27520x64

OR

microsoft windows_server_2008_r2Range<1.003x64

OR

microsoft windows_server_2008_r2Range<6.1.7601.27520x64

OR

microsoft windows_server_2008_r2Range<1.003x64

OR

microsoft windows_server_2008_sp2Range<6.0.6003.23070x86

OR

microsoft windows_server_2008_sp2Range<1.007x86

OR

microsoft windows_server_2008_sp2Range<6.0.6003.23070x86

OR

microsoft windows_server_2008_sp2Range<1.007x86

OR

microsoft windows_server_2008_sp2Range<6.0.6003.23070x64

OR

microsoft windows_server_2008_sp2Range<1.007x64

OR

microsoft windows_server_2008_sp2Range<6.0.6003.23070x64

OR

microsoft windows_server_2008_sp2Range<1.007x64

OR

microsoft windows_server_2016Range<10.0.14393.7699

OR

microsoft windows_server_2016Range<10.0.14393.7699

OR

microsoft windows_10_1607Range<10.0.14393.7699x64

OR

microsoft windows_10_1607Range<10.0.14393.7699x86

OR

microsoft windows_10_1507Range<10.0.10240.20890x64

OR

microsoft windows_10_1507Range<10.0.10240.20890x86

OR

microsoft windows_11_24h2Range<10.0.26100.2894x64

OR

microsoft windows_11_24h2Range<10.0.26100.2894x64

OR

microsoft windows_server_23h2Range<10.0.25398.1369

OR

microsoft windows_11_23h2Range<10.0.22631.4751x64

OR

microsoft windows_11_23h2Range<10.0.22631.4751x64

OR

microsoft windows_10_22h2Range<10.0.19045.5371x86

OR

microsoft windows_10_22h2Range<10.0.19045.5371x64

OR

microsoft windows_10_22h2Range<10.0.19045.5371x64

OR

microsoft windows_11_22h2Range<10.0.22621.4751x64

OR

microsoft windows_11_22h2Range<10.0.22621.4751x64

OR

microsoft windows_10_1809Range<10.0.17763.6775x64

OR

microsoft windows_10_1809Range<10.0.17763.6775x86

OR

microsoft windows_server_2025Range<10.0.26100.2894

OR

microsoft windows_server_2025Range<10.0.26100.2894

14 Jan 2025 08:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.14.3

EPSS0.00212

SSVC

microsoft vulnerability bypass security features