This vulnerability, tracked as CVE-2025-21328 and categorized under CWE-41 (Improper Resolution of Path Equivalence), affects Microsoft Windows 10 Version 1507 (build 10.0.10240.0). It involves a security feature bypass in the MapUrlToZone component, which could allow an attacker to circumvent zone-based security restrictions. The CVSS 3.1 base score is 4.3, indicating medium severity, with network attack vector, low complexity, no privileges required, and user interaction needed. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

The vulnerability allows bypassing security features related to URL zone mapping, potentially enabling attackers to execute actions that would normally be restricted by zone policies. The impact is limited to confidentiality loss without integrity or availability impact. Exploitation requires user interaction and can be performed remotely without privileges.

An official fix is available from Microsoft for this vulnerability. Users and administrators should apply the security update provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21328 to remediate this issue.