๐Ÿ” CVE Alert

CVE-2025-21225

MEDIUM 5.9

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

CVSS Score
5.9
EPSS Score
0.0%
EPSS Percentile
0th

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Vendor microsoft
Product windows server 2016
Ecosystems
Industries
TechnologyEnterprise
Published Jan 14, 2025
Last Updated Jun 9, 2026
Stay Ahead of the Next One

Get instant alerts for microsoft windows server 2016

Be the first to know when new medium vulnerabilities affecting microsoft windows server 2016 are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability

Affected Versions

Microsoft / Windows Server 2016
10.0.14393.0 < 10.0.14393.7699
Microsoft / Windows Server 2016 (Server Core installation)
10.0.14393.0 < 10.0.14393.7699
Microsoft / Windows Server 2019
10.0.17763.0 < 10.0.17763.6775
Microsoft / Windows Server 2019 (Server Core installation)
10.0.17763.0 < 10.0.17763.6775
Microsoft / Windows Server 2022
10.0.20348.0 < 10.0.20348.3091
Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)
10.0.25398.0 < 10.0.25398.1369
Microsoft / Windows Server 2025
10.0.26100.0 < 10.0.26100.2894
Microsoft / Windows Server 2025 (Server Core installation)
10.0.26100.0 < 10.0.26100.2894

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
msrc.microsoft.com: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21225