What is CVE-2023-21725?

CVE-2023-21725 is a medium-severity elevation of privilege vulnerability affecting the Windows Malicious Software Removal Tool. This security issue could potentially allow an attacker to delete data and cause the service to become unavailable on systems running the affected tool. While the attack complexity is high and exploitation is considered unlikely, it's important for users of the Windows Malicious Software Removal Tool to be aware of this vulnerability and take necessary precautions.

Who is impacted by CVE-2023-21725?

The impacted versions include all versions up to, but not including, 5.109 and build number 5.109.19957.1. This security issue could potentially lead to an elevation of privilege, which is a concern for users of the affected tool.

What to do if CVE-2023-21725 affected you

If you're affected by the CVE-2023-21725 vulnerability, it's important to take action to protect your system. Follow these steps:

1. Apply the security updates provided by Microsoft for the Windows Malicious Software Removal Tool (32-bit and 64-bit versions).

2. Ensure that systems are updated to the fixed build number (5.109.19957.1).

3. Keep software and systems up-to-date with the latest patches and updates from Microsoft.

4. Monitor security advisories and updates from Microsoft for any new information or additional mitigation steps.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-21725 vulnerability, also known as the Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability, is not mentioned in CISA's Known Exploited Vulnerabilities Catalog. This security issue, which could allow an attacker to delete data and cause the service to become unavailable, was published on January 10, 2023.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-362, a race condition issue, and CWE-59, a link following problem.

Learn More

For a comprehensive understanding of this vulnerability, consult the NVD page and the sources listed below.

• Microsoft Security Update Guide