CVE-2025-21420

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability...

CVE-2025-21420

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability...

CVE-2025-21420

creationtimestamp| type| source ---|---|--- 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:18:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbhfmnwy2x 2025-02-11 21:04:27+00:00| seen|...

CVE-2025-21420

CVE-2025-21420 is evidenced by PoCs showing a Disk Cleanup Tool (cleanmgr.exe) elevation via a DLL sideload approach. The GitHub PoCs demonstrate loading dokan1.dll/dokannp1.dll to trigger arbitrary code paths, with the exploit chain listing SetProcessMitigationPolicy (ProcessRedirectionTrustPoli...