Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2025-21191

🗓️ 08 Apr 2025 18:15:44Reported by [email protected]Type 
nvd
 nvd🔗 web.nvd.nist.gov👁 8 Views

Race condition in Windows Local Security Authority allows privilege escalation for authorized attackers.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2025-21191
8 Apr 202516:14
–circl
CNNVD		Microsoft Local Security Authority Server 安全漏洞
8 Apr 202500:00
–cnnvd
CVE		CVE-2025-21191
8 Apr 202517:23
–cve
Cvelist		CVE-2025-21191 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
8 Apr 202517:23
–cvelist
EUVD		EUVD-2025-10238
3 Oct 202520:07
–euvd
Microsoft KB		April 8, 2025—KB5055521 (OS Build 14393.7969)
8 Apr 202507:00
–mskb
Microsoft KB		April 8, 2025—KB5055526 (OS Build 20348.3453)
8 Apr 202507:00
–mskb
Microsoft KB		April 8, 2025—KB5055527 (OS Build 25398.1551)
8 Apr 202507:00
–mskb
Microsoft KB		April 9, 2025—KB5055547 (OS Build 10240.20979) - EXPIRED
8 Apr 202507:00
–mskb
Microsoft KB		April 8, 2025—KB5055557 (Monthly Rollup)
8 Apr 202507:00
–mskb
Rows per page
NVD
Node
microsoftwindows_10_1507Range<10.0.10240.20978x64
OR
microsoftwindows_10_1507Range<10.0.10240.20978x86
OR
microsoftwindows_10_1607Range<10.0.14393.7969x64
OR
microsoftwindows_10_1607Range<10.0.14393.7969x86
OR
microsoftwindows_10_1809Range<10.0.17763.7136x64
OR
microsoftwindows_10_1809Range<10.0.17763.7136x86
OR
microsoftwindows_10_21h2Range<10.0.19044.5737
OR
microsoftwindows_10_22h2Range<10.0.19045.5737
OR
microsoftwindows_11_22h2Range<10.0.22621.5189
OR
microsoftwindows_11_23h2Range<10.0.22631.5189
OR
microsoftwindows_11_24h2Range<10.0.26100.3775
OR
microsoftwindows_server_2008Match-sp2x64
OR
microsoftwindows_server_2008Match-sp2x86
OR
microsoftwindows_server_2008Matchr2sp1x64
OR
microsoftwindows_server_2012Match-
OR
microsoftwindows_server_2012Matchr2
OR
microsoftwindows_server_2016Range<10.0.14393.7969
OR
microsoftwindows_server_2019Range<10.0.17763.7136
OR
microsoftwindows_server_2022Range<10.0.20348.3453
OR
microsoftwindows_server_2022_23h2Range<10.0.25398.1551
OR
microsoftwindows_server_2025Range<10.0.26100.3775

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
07 Jul 2025 18:57Current
CVSS 3.17
EPSS0.00182
CWE-367
cve-2025-21191 windows local security authority privilege escalation race condition
8