cbcvebase.
CVE-2025-53143
published 2025-08-12

CVE-2025-53143: Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.

PriorityP259high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
1.08%
61.3th percentile
Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.

Affected

47 ranges· showing 25
VendorProductVersion rangeFixed in
microsoftwindows_10_1507< 10.0.10240.2110010.0.10240.21100
microsoftwindows_10_1607< 10.0.14393.833010.0.14393.8330
microsoftwindows_10_1809< 10.0.17763.767810.0.17763.7678
microsoftwindows_10_21h2< 10.0.19044.621610.0.19044.6216
microsoftwindows_10_22h2< 10.0.19045.621610.0.19045.6216
microsoftwindows_10_version_1507>= 10.0.10240.0 < 10.0.10240.2110010.0.10240.21100
microsoftwindows_10_version_1607>= 10.0.14393.0 < 10.0.14393.833010.0.14393.8330
microsoftwindows_10_version_1809>= 10.0.17763.0 < 10.0.17763.767810.0.17763.7678
microsoftwindows_10_version_21h2>= 10.0.19044.0 < 10.0.19044.621610.0.19044.6216
microsoftwindows_10_version_22h2>= 10.0.19045.0 < 10.0.19045.621610.0.19045.6216
microsoftwindows_11_22h2< 10.0.22621.576810.0.22621.5768
microsoftwindows_11_23h2< 10.0.22631.576810.0.22631.5768
microsoftwindows_11_24h2< 10.0.26100.485110.0.26100.4851
microsoftwindows_11_version_22h2>= 10.0.22621.0 < 10.0.22621.576810.0.22621.5768
microsoftwindows_11_version_22h3>= 10.0.22631.0 < 10.0.22631.576810.0.22631.5768
microsoftwindows_11_version_23h2>= 10.0.22631.0 < 10.0.22631.576810.0.22631.5768
microsoftwindows_11_version_24h2>= 10.0.26100.0 < 10.0.26100.494610.0.26100.4946
microsoftwindows_server_2008
microsoftwindows_server_2008_r2_service_pack_1>= 6.1.7601.0 < 6.1.7601.278726.1.7601.27872
microsoftwindows_server_2008_service_pack_2>= 6.0.6003.0 < 6.0.6003.234716.0.6003.23471
microsoftwindows_server_2012
microsoftwindows_server_2012>= 6.2.9200.0 < 6.2.9200.256226.2.9200.25622
microsoftwindows_server_2012_r2>= 6.3.9600.0 < 6.3.9600.227256.3.9600.22725
microsoftwindows_server_2016< 10.0.14393.833010.0.14393.8330
microsoftwindows_server_2016>= 10.0.14393.0 < 10.0.14393.833010.0.14393.8330

Detection & IOCsextracted from sources · hover to see the quote

  • Exploit vector is a specially crafted MSMQ packet sent over the network to a MSMQ server; monitor for anomalous or malformed inbound traffic on the MSMQ default port (TCP 1801) from authenticated but unexpected sources
  • The vulnerability class is type confusion (CWE-843) in Windows Message Queuing (MSMQ); detection logic should focus on unexpected type handling or memory corruption indicators in the mqsvc.exe / MSMQ service process
  • ·Exploitation requires the attacker to be authenticated; unauthenticated network access alone is insufficient to trigger the vulnerability
  • ·As of the advisory publication, the vulnerability has not been publicly disclosed or exploited in the wild, reducing immediate risk but not eliminating it
  • ·Customer action is required; systems running Windows Message Queuing must be patched using the applicable KB updates listed in the advisory

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vendor_msrc8.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.