CVE-2025-21299 is a vulnerability in Microsoft Windows 10 Version 1507 (build 10.0.10240.0) related to insecure storage of sensitive information in the Kerberos authentication feature. This weakness enables a security feature bypass, potentially allowing an attacker with local access and low privileges to gain unauthorized access to sensitive data or escalate privileges. The CVSS v3.1 base score is 7.1 (high), reflecting the impact on confidentiality and integrity. Microsoft has released an official fix to address this issue.

Successful exploitation of this vulnerability could lead to compromise of sensitive information protected by the Kerberos authentication mechanism, affecting confidentiality and integrity on the affected system. The attack requires local access with low privileges and does not require user interaction. Availability is not impacted. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21299 to remediate this vulnerability.