CVE-2025-21194

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-21194", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "state": "PUBLISHED", "assignerShortName": "microsoft", "dateReserved": "2024-12-05T21:43:30.766Z", "datePublished": "2025-02-11T17:58:25.882Z", "dateUpdated": "2026-02-13T19:44:27.885Z"}, "containers": {"cna": {"title": "Microsoft Surface Security Feature Bypass Vulnerability", "datePublic": "2025-02-11T08:00:00.000Z", "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:h:microsoft:surface_laptop_4_intel_processor:*:*:*:*:*:*:*:*", "versionStartIncluding": "-"}, {"vulnerable": true, "criteria": "cpe:2.3:h:microsoft:surface_laptop_go_2:*:*:*:*:*:*:*:*", "versionStartIncluding": "-"}, {"vulnerable": true, "criteria": "cpe:2.3:h:microsoft:surface_go_3:*:*:*:*:*:*:*:*", "versionStartIncluding": "-"}, {"vulnerable": true, "criteria": "cpe:2.3:h:microsoft:surface_laptop_go_3:*:*:*:*:*:*:*:*", "versionStartIncluding": "-"}, {"vulnerable": true, "criteria": "cpe:2.3:h:microsoft:surface_laptop_4_AMD_processor:*:*:*:*:*:*:*:*", "versionStartIncluding": "-"}, {"vulnerable": true, "criteria": "cpe:2.3:h:microsoft:surface_pro_7:*:*:*:*:*:*:*:*", "versionStartIncluding": "-"}, {"vulnerable": true, "criteria": "cpe:2.3:h:microsoft:surface_hub_2S:*:*:*:*:*:*:*:*", "versionStartIncluding": "-"}, {"vulnerable": true, "criteria": "cpe:2.3:h:microsoft:surface_laptop_3_intel_processor:*:*:*:*:*:*:*:*", "versionStartIncluding": "-"}, {"vulnerable": true, "criteria": "cpe:2.3:h:microsoft:surface_go_2:*:*:*:*:*:*:*:*", "versionStartIncluding": "-"}, {"vulnerable": true, "criteria": "cpe:2.3:h:microsoft:surface_pro_8:*:*:*:*:*:*:*:*", "versionStartIncluding": "-"}, {"vulnerable": true, "criteria": "cpe:2.3:h:microsoft:surface_windows_dev_kit:*:*:*:*:*:*:*:*", "versionStartIncluding": "-"}, {"vulnerable": true, "criteria": "cpe:2.3:h:microsoft:surface_pro_9_ARM:*:*:*:*:*:*:*:*", "versionStartIncluding": "-"}]}]}], "affected": [{"vendor": "Microsoft", "product": "Microsoft Surface Go", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Surface Hub", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Surface Laptop Go", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Surface Laptop Go 3", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Surface Pro", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Surface Pro 8", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Surface Pro 9 ARM", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Surface Laptop 3 with Intel Processor", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Surface Laptop 4 with AMD Processor", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Surface Laptop 4 with Intel Processor", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Surface Windows Dev Kit", "versions": [{"version": "-", "status": "affected"}]}], "descriptions": [{"value": "Microsoft Surface Security Feature Bypass Vulnerability", "lang": "en-US"}], "problemTypes": [{"descriptions": [{"description": "CWE-20: Improper Input Validation", "lang": "en-US", "type": "CWE", "cweId": "CWE-20"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2026-02-13T19:44:27.885Z"}, "references": [{"name": "Microsoft Surface Security Feature Bypass Vulnerability", "tags": ["vendor-advisory", "patch"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21194"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseSeverity": "HIGH", "baseScore": 7.1, "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-02-11T19:16:42.644260Z", "id": "CVE-2025-21194", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-11T19:28:13.429Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-21194", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-02-11T19:16:42.644260Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-11T19:16:44.362Z"}}], "cna": {"title": "Microsoft Surface Security Feature Bypass Vulnerability", "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "Microsoft", "product": "Microsoft Surface Go", "versions": [{"status": "affected", "version": "-"}]}, {"vendor": "Microsoft", "product": "Microsoft Surface Hub", "versions": [{"status": "affected", "version": "-"}]}, {"vendor": "Microsoft", "product": "Microsoft Surface Laptop Go", "versions": [{"status": "affected", "version": "-"}]}, {"vendor": "Microsoft", "product": "Microsoft Surface Laptop Go 3", "versions": [{"status": "affected", "version": "-"}]}, {"vendor": "Microsoft", "product": "Microsoft Surface Pro", "versions": [{"status": "affected", "version": "-"}]}, {"vendor": "Microsoft", "product": "Microsoft Surface Pro 8", "versions": [{"status": "affected", "version": "-"}]}, {"vendor": "Microsoft", "product": "Microsoft Surface Pro 9 ARM", "versions": [{"status": "affected", "version": "-"}]}, {"vendor": "Microsoft", "product": "Surface Laptop 3 with Intel Processor", "versions": [{"status": "affected", "version": "-"}]}, {"vendor": "Microsoft", "product": "Surface Laptop 4 with AMD Processor", "versions": [{"status": "affected", "version": "-"}]}, {"vendor": "Microsoft", "product": "Surface Laptop 4 with Intel Processor", "versions": [{"status": "affected", "version": "-"}]}, {"vendor": "Microsoft", "product": "Surface Windows Dev Kit", "versions": [{"status": "affected", "version": "-"}]}], "datePublic": "2025-02-11T08:00:00.000Z", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21194", "name": "Microsoft Surface Security Feature Bypass Vulnerability", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en-US", "value": "Microsoft Surface Security Feature Bypass Vulnerability"}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20: Improper Input Validation"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_4_intel_processor:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "-"}, {"criteria": "cpe:2.3:h:microsoft:surface_laptop_go_2:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "-"}, {"criteria": "cpe:2.3:h:microsoft:surface_go_3:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "-"}, {"criteria": "cpe:2.3:h:microsoft:surface_laptop_go_3:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "-"}, {"criteria": "cpe:2.3:h:microsoft:surface_laptop_4_AMD_processor:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "-"}, {"criteria": "cpe:2.3:h:microsoft:surface_pro_7:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "-"}, {"criteria": "cpe:2.3:h:microsoft:surface_hub_2S:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "-"}, {"criteria": "cpe:2.3:h:microsoft:surface_laptop_3_intel_processor:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "-"}, {"criteria": "cpe:2.3:h:microsoft:surface_go_2:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "-"}, {"criteria": "cpe:2.3:h:microsoft:surface_pro_8:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "-"}, {"criteria": "cpe:2.3:h:microsoft:surface_windows_dev_kit:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "-"}, {"criteria": "cpe:2.3:h:microsoft:surface_pro_9_ARM:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "-"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2026-02-13T19:44:27.885Z"}}}, "cveMetadata": {"cveId": "CVE-2025-21194", "state": "PUBLISHED", "dateUpdated": "2026-02-13T19:44:27.885Z", "dateReserved": "2024-12-05T21:43:30.766Z", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "datePublished": "2025-02-11T17:58:25.882Z", "assignerShortName": "microsoft"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Microsoft Surface Go", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "-"}]}, {"product": "Microsoft Surface Hub", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "-"}]}, {"product": "Microsoft Surface Laptop Go", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "-"}]}, {"product": "Microsoft Surface Laptop Go 3", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "-"}]}, {"product": "Microsoft Surface Pro", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "-"}]}, {"product": "Microsoft Surface Pro 8", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "-"}]}, {"product": "Microsoft Surface Pro 9 ARM", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "-"}]}, {"product": "Surface Laptop 3 with Intel Processor", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "-"}]}, {"product": "Surface Laptop 4 with AMD Processor", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "-"}]}, {"product": "Surface Laptop 4 with Intel Processor", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "-"}]}, {"product": "Surface Windows Dev Kit", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "-"}]}], "source": "secure@microsoft.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_2s_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0373B077-9CDC-4D56-9180-53DD54D6C3D8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub_2s:-:*:*:*:*:*:*:*", "matchCriteriaId": "5126D18E-4EFC-43CF-8243-895034C8FADC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_pro_8_for_business_1983_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "17896CFB-0B7D-456A-8A82-A971C3B5F072", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_pro_8_for_business_1983:-:*:*:*:*:*:*:*", "matchCriteriaId": "8FBD2702-436C-4EB6-8F7F-4D65DFC9CCFA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_go_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F4FD9969-A47F-4F34-8775-07107C4B0557", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_go:-:*:*:*:*:*:*:*", "matchCriteriaId": "4751A72E-1E1A-455D-A179-F9936A9F87FA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_go_2_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FC33B563-7807-4AB3-8887-D228B1F60437", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_go_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "6E160CD9-BE19-4900-81E4-61BC6050215B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_3_50_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "EECA9AFD-5144-4B18-B4EF-DF1541FC9564", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub_3_50:-:*:*:*:*:*:*:*", "matchCriteriaId": "3F56EC8E-E144-4D8F-B224-A7E6FA659437", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_2s_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0373B077-9CDC-4D56-9180-53DD54D6C3D8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub_2s:-:*:*:*:*:*:*:*", "matchCriteriaId": "5126D18E-4EFC-43CF-8243-895034C8FADC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_pro_7\\+_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F9A5CB11-7AE2-47C0-A029-998B9C98E12E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_pro_7\\+:-:*:*:*:*:*:*:*", "matchCriteriaId": "D80D94B4-E68D-4DFF-A5AA-D6E183AC7579", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_go_3_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F0D8F8A2-837E-452B-8AD2-BA2A511D5C18", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_go_3:-:*:*:*:*:*:*:*", "matchCriteriaId": "9AD4AE51-45EE-43E8-ABC2-72E365354022", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_go_3_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DCE166FE-D173-4E62-8AA0-C80C0E4D8820", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_go_3:-:*:*:*:*:*:*:*", "matchCriteriaId": "EDAC37E4-8768-4207-A8B8-6D68D52AABF9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_go_2_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FC33B563-7807-4AB3-8887-D228B1F60437", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_go_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "6E160CD9-BE19-4900-81E4-61BC6050215B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_pro_9_with_5g_1997_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "3CD49D37-90B1-4C07-83D6-80A3B60BFD93", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_pro_9_with_5g_1997:-:*:*:*:*:*:*:*", "matchCriteriaId": "384F730B-E216-4C4E-A95A-15D1F84613CC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_pro_9_with_5g_1996_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "23755029-6C52-4F4B-A4E0-C2CC810BAD2E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_pro_9_with_5g_1996:-:*:*:*:*:*:*:*", "matchCriteriaId": "48465AD2-8B10-4185-8C1D-265E835584C4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_3_1867_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5805C772-1C4A-4A48-9394-00DBDAD7DEB6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_3_1867:-:*:*:*:*:*:*:*", "matchCriteriaId": "7392E4DC-D40E-4F78-A086-F77C8AA9B452", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_3_1872_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "57C48B0F-2062-43DB-BAFD-C0C847DE1102", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_3_1872:-:*:*:*:*:*:*:*", "matchCriteriaId": "9E22D67D-CEE6-4F23-9B7D-25B5717F1817", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1958_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1DB5B208-C22B-4A1D-832C-29B693F35586", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1958:-:*:*:*:*:*:*:*", "matchCriteriaId": "2CD2054E-1098-4BEA-BA95-8430BF28192E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1950_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5AA3D6B9-DD55-4CBD-A1E5-0737E3538A09", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1950:-:*:*:*:*:*:*:*", "matchCriteriaId": "D6C3A0E0-6485-411B-BC31-1A8A275CB034", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1952_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DB6C780C-DDCE-447D-978C-57115EBBF4B9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1952:-:*:*:*:*:*:*:*", "matchCriteriaId": "6110417B-F51F-42B3-95F9-AD7D6398FED3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1978_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "EF2D920B-D1C3-4F79-AC91-14C3C61D7A0C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1978:-:*:*:*:*:*:*:*", "matchCriteriaId": "82E9E481-0326-4229-A8A7-84DE0D095425", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_dev_kit_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "3FDBEB11-868E-4176-9DA4-F0C9CEEA7CC2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:windows_dev_kit:-:*:*:*:*:*:*:*", "matchCriteriaId": "85AD5792-45EA-48DD-8706-85841DDFB12F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_2s_85_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "AF8F1CF9-94CF-4634-9851-65CF1C67A6AC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub_2s_85:-:*:*:*:*:*:*:*", "matchCriteriaId": "A6D8102C-03E0-49E9-BA39-0F72E30C6304", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_3_50_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "EECA9AFD-5144-4B18-B4EF-DF1541FC9564", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub_3_50:-:*:*:*:*:*:*:*", "matchCriteriaId": "3F56EC8E-E144-4D8F-B224-A7E6FA659437", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_3_85_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5A3A16E8-2056-4650-BE5C-30B84E2AB848", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub_3_85:-:*:*:*:*:*:*:*", "matchCriteriaId": "14066FEE-0F3B-4271-BC68-80ECD53DA4DC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_pro_8_1983_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6E94C16E-94D9-4273-B8C8-BC57762F8367", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_pro_8_1983:-:*:*:*:*:*:*:*", "matchCriteriaId": "0A187D45-BB47-4667-ADFE-8B9E823F221B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_pro_8_for_business_with_lte_advanced_1982_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B2C9AC0B-1A29-4D57-A26D-AE7B8120EB19", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_pro_8_for_business_with_lte_advanced_1982:-:*:*:*:*:*:*:*", "matchCriteriaId": "262D30D4-449E-47BB-9678-9F371B28DCF5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_3_85_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5A3A16E8-2056-4650-BE5C-30B84E2AB848", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub_3_85:-:*:*:*:*:*:*:*", "matchCriteriaId": "14066FEE-0F3B-4271-BC68-80ECD53DA4DC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_2s_85_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "AF8F1CF9-94CF-4634-9851-65CF1C67A6AC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub_2s_85:-:*:*:*:*:*:*:*", "matchCriteriaId": "A6D8102C-03E0-49E9-BA39-0F72E30C6304", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_go_3_1926_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6CF69EC7-C430-48EA-8E4F-3C392D1AFCA3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_go_3_1926:-:*:*:*:*:*:*:*", "matchCriteriaId": "E8EA8E7D-17E8-4E7A-B4A4-A208DC329FDB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_go_3_1901_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "3CB6A413-CB85-4A53-B851-20CD13B93688", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_go_3_1901:-:*:*:*:*:*:*:*", "matchCriteriaId": "BD1750C1-2FDE-4A84-81D8-F57DE7E24974", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_go_3_2022_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "222EC78A-597B-4D14-BE1F-82102C0BB0B4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_go_3_2022:-:*:*:*:*:*:*:*", "matchCriteriaId": "21C3A91A-3394-45DE-8932-5431EE8BFC99", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_go_2_1926_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FA077CA3-7A69-4226-AAD8-2BC199961704", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_go_2_1926:-:*:*:*:*:*:*:*", "matchCriteriaId": "80BE3894-3006-48E4-8DE9-9B059A05DCC4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_go_2_1901_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1CEF91B1-F29A-4F81-BAC9-6B93BBC5D749", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_go_2_1901:-:*:*:*:*:*:*:*", "matchCriteriaId": "1F33EDF2-9058-4329-BBF6-2FCE80433F5B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_go_2_1927_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1549BEF0-C1C6-4D1A-9662-1FB6672DBF69", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_go_2_1927:-:*:*:*:*:*:*:*", "matchCriteriaId": "32B48180-38CB-4C0E-BAF0-B99ACE575CFC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Microsoft Surface Security Feature Bypass Vulnerability"}, {"lang": "es", "value": "Vulnerabilidad de omisi\u00f3n de funciones de seguridad de Microsoft Surface"}], "id": "CVE-2025-21194", "lastModified": "2026-06-17T08:42:44.643", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "secure@microsoft.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-21194", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-02-11T19:16:42.644260Z", "version": "2.0.3"}}]}, "published": "2025-02-11T18:15:30.820", "references": [{"source": "secure@microsoft.com", "tags": ["Vendor Advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21194"}], "sourceIdentifier": "secure@microsoft.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "secure@microsoft.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}