CVE-2025-21194
Microsoft Surface Security Feature Bypass Vulnerability
Microsoft Surface Security Feature Bypass Vulnerability
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Microsoft Surface Security Feature Bypass Vulnerability
Microsoft Surface Security Feature Bypass Vulnerability
- Record
CVE-2025-21194- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2025-2271
Microsoft Surface Security Feature Bypass Vulnerability
- Record
EUVD-2025-2271- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-wq6m-8j35-4r2x
Microsoft Surface Security Feature Bypass Vulnerability
Microsoft Surface Security Feature Bypass Vulnerability
- Record
GHSA-wq6m-8j35-4r2x- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
NVD
Microsoft Surface Security Feature Bypass Vulnerability
- Record
CVE-2025-21194- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
- microsoft surface go
- microsoft surface hub
- microsoft surface laptop go
- microsoft surface laptop go 3
- microsoft surface pro
- microsoft surface pro 8
- microsoft surface pro 9 arm
- microsoft surface laptop 3 with intel processor
- microsoft surface laptop 4 with amd processor
- microsoft surface laptop 4 with intel processor
- microsoft surface windows dev kit
- microsoft surface go 2 1901 firmware
Show 26 moreShow less
- microsoft surface go 2 1926 firmware
- microsoft surface go 2 1927 firmware
- microsoft surface go 3 1901 firmware
- microsoft surface go 3 1926 firmware
- microsoft surface go 3 2022 firmware
- microsoft surface go 3 firmware
- microsoft surface hub 2s 85 firmware
- microsoft surface hub 2s firmware
- microsoft surface hub 3 50 firmware
- microsoft surface hub 3 85 firmware
- microsoft surface laptop 3 1867 firmware
- microsoft surface laptop 3 1872 firmware
- microsoft surface laptop 4 1950 firmware
- microsoft surface laptop 4 1952 firmware
- microsoft surface laptop 4 1958 firmware
- microsoft surface laptop 4 1978 firmware
- microsoft surface laptop go 2 firmware
- microsoft surface laptop go 3 firmware
- microsoft surface laptop go firmware
- microsoft surface pro 7\+ firmware
- microsoft surface pro 8 1983 firmware
- microsoft surface pro 8 for business 1983 firmware
- microsoft surface pro 8 for business with lte advanced 1982 firmware
- microsoft surface pro 9 with 5g 1996 firmware
- microsoft surface pro 9 with 5g 1997 firmware
- microsoft windows dev kit firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-21194 is a high vulnerability (CVSS 7.1) in Microsoft Surface Go, published February 11, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.84%, the 58th percentile. No source names a fixed version.