CVE-2025-21194
Microsoft Surface Security Feature Bypass Vulnerability
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.1EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
11 Feb 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Microsoft Surface Security Feature Bypass Vulnerability
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected products
Microsoft · Microsoft Surface GoMicrosoft · Microsoft Surface HubMicrosoft · Microsoft Surface Laptop GoMicrosoft · Microsoft Surface Laptop Go 3Microsoft · Microsoft Surface ProMicrosoft · Microsoft Surface Pro 8Microsoft · Microsoft Surface Pro 9 ARMMicrosoft · Surface Laptop 3 with Intel ProcessorMicrosoft · Surface Laptop 4 with AMD ProcessorMicrosoft · Surface Laptop 4 with Intel ProcessorMicrosoft · Surface Windows Dev Kit