Microsoft update

KB5053593

IE Cumulative

Fixed in

Windows Server 2008 R2 for x64-based Systems Service Pack 1 1.000
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 1.000
Windows Server 2008 for 32-bit Systems Service Pack 2 1.000
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 1.000
Windows Server 2012 R2 1.000
Windows Server 2012 R2 (Server Core installation) 1.000

TI-2025-15215 CVE-2025-21247 · GHSA-g85v-525p-358p

LOW 26

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.03051 Published 2025-03-11 Fixed in 10.0.10240.20947, 10.0.14393.7876 +12 CWE-41