{"id": "CVE-2025-21194", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "secure@microsoft.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "published": "2025-02-11T18:15:30.820", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21194", "tags": ["Vendor Advisory"], "source": "secure@microsoft.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "secure@microsoft.com", "description": [{"lang": "en", "value": "CWE-20"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Microsoft Surface Security Feature Bypass Vulnerability"}, {"lang": "es", "value": "Vulnerabilidad de omisi\u00f3n de funciones de seguridad de Microsoft Surface"}], "lastModified": "2025-07-08T14:14:50.187", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_2s_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0373B077-9CDC-4D56-9180-53DD54D6C3D8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub_2s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5126D18E-4EFC-43CF-8243-895034C8FADC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_pro_8_for_business_1983_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17896CFB-0B7D-456A-8A82-A971C3B5F072"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_pro_8_for_business_1983:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8FBD2702-436C-4EB6-8F7F-4D65DFC9CCFA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_go_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F4FD9969-A47F-4F34-8775-07107C4B0557"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_go:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4751A72E-1E1A-455D-A179-F9936A9F87FA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_go_2_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC33B563-7807-4AB3-8887-D228B1F60437"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_go_2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6E160CD9-BE19-4900-81E4-61BC6050215B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_3_50_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EECA9AFD-5144-4B18-B4EF-DF1541FC9564"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub_3_50:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3F56EC8E-E144-4D8F-B224-A7E6FA659437"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_2s_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0373B077-9CDC-4D56-9180-53DD54D6C3D8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub_2s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5126D18E-4EFC-43CF-8243-895034C8FADC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_pro_7\\+_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9A5CB11-7AE2-47C0-A029-998B9C98E12E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_pro_7\\+:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D80D94B4-E68D-4DFF-A5AA-D6E183AC7579"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_go_3_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F0D8F8A2-837E-452B-8AD2-BA2A511D5C18"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_go_3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9AD4AE51-45EE-43E8-ABC2-72E365354022"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_go_3_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DCE166FE-D173-4E62-8AA0-C80C0E4D8820"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_go_3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EDAC37E4-8768-4207-A8B8-6D68D52AABF9"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_go_2_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC33B563-7807-4AB3-8887-D228B1F60437"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_go_2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6E160CD9-BE19-4900-81E4-61BC6050215B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_pro_9_with_5g_1997_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3CD49D37-90B1-4C07-83D6-80A3B60BFD93"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_pro_9_with_5g_1997:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "384F730B-E216-4C4E-A95A-15D1F84613CC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_pro_9_with_5g_1996_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "23755029-6C52-4F4B-A4E0-C2CC810BAD2E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_pro_9_with_5g_1996:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "48465AD2-8B10-4185-8C1D-265E835584C4"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_3_1867_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5805C772-1C4A-4A48-9394-00DBDAD7DEB6"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_3_1867:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7392E4DC-D40E-4F78-A086-F77C8AA9B452"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_3_1872_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "57C48B0F-2062-43DB-BAFD-C0C847DE1102"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_3_1872:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9E22D67D-CEE6-4F23-9B7D-25B5717F1817"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1958_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1DB5B208-C22B-4A1D-832C-29B693F35586"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1958:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2CD2054E-1098-4BEA-BA95-8430BF28192E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1950_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AA3D6B9-DD55-4CBD-A1E5-0737E3538A09"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1950:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D6C3A0E0-6485-411B-BC31-1A8A275CB034"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1952_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB6C780C-DDCE-447D-978C-57115EBBF4B9"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1952:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6110417B-F51F-42B3-95F9-AD7D6398FED3"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1978_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF2D920B-D1C3-4F79-AC91-14C3C61D7A0C"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1978:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "82E9E481-0326-4229-A8A7-84DE0D095425"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_dev_kit_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3FDBEB11-868E-4176-9DA4-F0C9CEEA7CC2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:windows_dev_kit:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "85AD5792-45EA-48DD-8706-85841DDFB12F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_2s_85_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF8F1CF9-94CF-4634-9851-65CF1C67A6AC"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub_2s_85:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A6D8102C-03E0-49E9-BA39-0F72E30C6304"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_3_50_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EECA9AFD-5144-4B18-B4EF-DF1541FC9564"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub_3_50:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3F56EC8E-E144-4D8F-B224-A7E6FA659437"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_3_85_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A3A16E8-2056-4650-BE5C-30B84E2AB848"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub_3_85:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "14066FEE-0F3B-4271-BC68-80ECD53DA4DC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_pro_8_1983_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E94C16E-94D9-4273-B8C8-BC57762F8367"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_pro_8_1983:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0A187D45-BB47-4667-ADFE-8B9E823F221B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_pro_8_for_business_with_lte_advanced_1982_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2C9AC0B-1A29-4D57-A26D-AE7B8120EB19"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_pro_8_for_business_with_lte_advanced_1982:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "262D30D4-449E-47BB-9678-9F371B28DCF5"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_3_85_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A3A16E8-2056-4650-BE5C-30B84E2AB848"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub_3_85:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "14066FEE-0F3B-4271-BC68-80ECD53DA4DC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_2s_85_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF8F1CF9-94CF-4634-9851-65CF1C67A6AC"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub_2s_85:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A6D8102C-03E0-49E9-BA39-0F72E30C6304"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_go_3_1926_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6CF69EC7-C430-48EA-8E4F-3C392D1AFCA3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_go_3_1926:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E8EA8E7D-17E8-4E7A-B4A4-A208DC329FDB"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_go_3_1901_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3CB6A413-CB85-4A53-B851-20CD13B93688"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_go_3_1901:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BD1750C1-2FDE-4A84-81D8-F57DE7E24974"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_go_3_2022_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "222EC78A-597B-4D14-BE1F-82102C0BB0B4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_go_3_2022:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "21C3A91A-3394-45DE-8932-5431EE8BFC99"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_go_2_1926_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA077CA3-7A69-4226-AAD8-2BC199961704"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_go_2_1926:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "80BE3894-3006-48E4-8DE9-9B059A05DCC4"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_go_2_1901_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1CEF91B1-F29A-4F81-BAC9-6B93BBC5D749"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_go_2_1901:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1F33EDF2-9058-4329-BBF6-2FCE80433F5B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_go_2_1927_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1549BEF0-C1C6-4D1A-9662-1FB6672DBF69"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_go_2_1927:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "32B48180-38CB-4C0E-BAF0-B99ACE575CFC"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "secure@microsoft.com"}
