# CVE-2025-21189: MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-21189 is fixed in 37 products on 1 platform, first by KB5049993, released January 14, 2025. It is not reported as exploited, but the vendor rates exploitation more likely. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/cve/CVE-2025-21189
- Priority: Urgent
- CVSS: 4.3 (Important)
- EPSS: 0.0291
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Vendor exploitability assessment: Exploitation More Likely
- Published: Jan 14, 2025
- Weakness: Improper Resolution of Path Equivalence
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21189

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Microsoft | Windows 10 Version 1607 for 32-bit Systems | 14393.7699 | [KB5049993](https://patchblox.com/security/data/fix/microsoft/kb5049993.md) | Jan 14, 2025 |
| Microsoft | Windows 10 Version 1607 for x64-based Systems | 14393.7699 | [KB5049993](https://patchblox.com/security/data/fix/microsoft/kb5049993.md) | Jan 14, 2025 |
| Microsoft | Windows 10 Version 1809 for 32-bit Systems | 17763.6775 | [KB5050008](https://patchblox.com/security/data/fix/microsoft/kb5050008.md) | Jan 14, 2025 |
| Microsoft | Windows 10 Version 1809 for x64-based Systems | 17763.6775 | [KB5050008](https://patchblox.com/security/data/fix/microsoft/kb5050008.md) | Jan 14, 2025 |
| Microsoft | Windows 10 Version 21H2 for 32-bit Systems |  | [KB5049981](https://patchblox.com/security/data/fix/microsoft/kb5049981.md) | Jan 14, 2025 |
| Microsoft | Windows 10 Version 21H2 for ARM64-based Systems |  | [KB5049981](https://patchblox.com/security/data/fix/microsoft/kb5049981.md) | Jan 14, 2025 |
| Microsoft | Windows 10 Version 21H2 for x64-based Systems |  | [KB5049981](https://patchblox.com/security/data/fix/microsoft/kb5049981.md) | Jan 14, 2025 |
| Microsoft | Windows 10 Version 22H2 for 32-bit Systems |  | [KB5049981](https://patchblox.com/security/data/fix/microsoft/kb5049981.md) | Jan 14, 2025 |
| Microsoft | Windows 10 Version 22H2 for ARM64-based Systems |  | [KB5049981](https://patchblox.com/security/data/fix/microsoft/kb5049981.md) | Jan 14, 2025 |
| Microsoft | Windows 10 Version 22H2 for x64-based Systems |  | [KB5049981](https://patchblox.com/security/data/fix/microsoft/kb5049981.md) | Jan 14, 2025 |
| Microsoft | Windows 10 for 32-bit Systems | 10240.20890 | [KB5050013](https://patchblox.com/security/data/fix/microsoft/kb5050013.md) | Jan 14, 2025 |
| Microsoft | Windows 10 for x64-based Systems | 10240.20890 | [KB5050013](https://patchblox.com/security/data/fix/microsoft/kb5050013.md) | Jan 14, 2025 |
| Microsoft | Windows 11 Version 22H2 for ARM64-based Systems |  | [KB5050021](https://patchblox.com/security/data/fix/microsoft/kb5050021.md) | Jan 14, 2025 |
| Microsoft | Windows 11 Version 22H2 for x64-based Systems |  | [KB5050021](https://patchblox.com/security/data/fix/microsoft/kb5050021.md) | Jan 14, 2025 |
| Microsoft | Windows 11 Version 23H2 for ARM64-based Systems |  | [KB5050021](https://patchblox.com/security/data/fix/microsoft/kb5050021.md) | Jan 14, 2025 |
| Microsoft | Windows 11 Version 23H2 for x64-based Systems |  | [KB5050021](https://patchblox.com/security/data/fix/microsoft/kb5050021.md) | Jan 14, 2025 |
| Microsoft | Windows 11 Version 24H2 for ARM64-based Systems | 26100.2894 | [KB5050009](https://patchblox.com/security/data/fix/microsoft/kb5050009.md) | Jan 14, 2025 |
| Microsoft | Windows 11 Version 24H2 for x64-based Systems | 26100.2894 | [KB5050009](https://patchblox.com/security/data/fix/microsoft/kb5050009.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2008 R2 for x64-based Systems Service Pack 1 |  | [KB5050049](https://patchblox.com/security/data/fix/microsoft/kb5050049.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2008 R2 for x64-based Systems Service Pack 1 |  | [KB5049994](https://patchblox.com/security/data/fix/microsoft/kb5049994.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) |  | [KB5050049](https://patchblox.com/security/data/fix/microsoft/kb5050049.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) |  | [KB5049994](https://patchblox.com/security/data/fix/microsoft/kb5049994.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2008 for 32-bit Systems Service Pack 2 |  | [KB5050063](https://patchblox.com/security/data/fix/microsoft/kb5050063.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2008 for 32-bit Systems Service Pack 2 |  | [KB5049994](https://patchblox.com/security/data/fix/microsoft/kb5049994.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) |  | [KB5050063](https://patchblox.com/security/data/fix/microsoft/kb5050063.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) |  | [KB5049994](https://patchblox.com/security/data/fix/microsoft/kb5049994.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2008 for x64-based Systems Service Pack 2 |  | [KB5050063](https://patchblox.com/security/data/fix/microsoft/kb5050063.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2008 for x64-based Systems Service Pack 2 |  | [KB5049994](https://patchblox.com/security/data/fix/microsoft/kb5049994.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) |  | [KB5050063](https://patchblox.com/security/data/fix/microsoft/kb5050063.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) |  | [KB5049994](https://patchblox.com/security/data/fix/microsoft/kb5049994.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2012 |  | [KB5049994](https://patchblox.com/security/data/fix/microsoft/kb5049994.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2012 |  | [KB5050004](https://patchblox.com/security/data/fix/microsoft/kb5050004.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2012 (Server Core installation) |  | [KB5049994](https://patchblox.com/security/data/fix/microsoft/kb5049994.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2012 (Server Core installation) |  | [KB5050004](https://patchblox.com/security/data/fix/microsoft/kb5050004.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2012 R2 |  | [KB5050048](https://patchblox.com/security/data/fix/microsoft/kb5050048.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2012 R2 |  | [KB5049994](https://patchblox.com/security/data/fix/microsoft/kb5049994.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2012 R2 (Server Core installation) |  | [KB5050048](https://patchblox.com/security/data/fix/microsoft/kb5050048.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2012 R2 (Server Core installation) |  | [KB5049994](https://patchblox.com/security/data/fix/microsoft/kb5049994.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2016 | 14393.7699 | [KB5049993](https://patchblox.com/security/data/fix/microsoft/kb5049993.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2016 (Server Core installation) | 14393.7699 | [KB5049993](https://patchblox.com/security/data/fix/microsoft/kb5049993.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2019 | 17763.6775 | [KB5050008](https://patchblox.com/security/data/fix/microsoft/kb5050008.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2019 (Server Core installation) | 17763.6775 | [KB5050008](https://patchblox.com/security/data/fix/microsoft/kb5050008.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2022 | 20348.3091 | [KB5049983](https://patchblox.com/security/data/fix/microsoft/kb5049983.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2022 (Server Core installation) | 20348.3091 | [KB5049983](https://patchblox.com/security/data/fix/microsoft/kb5049983.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2022, 23H2 Edition (Server Core installation) | 25398.1369 | [KB5049984](https://patchblox.com/security/data/fix/microsoft/kb5049984.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2025 | 26100.2894 | [KB5050009](https://patchblox.com/security/data/fix/microsoft/kb5050009.md) | Jan 14, 2025 |
| Microsoft | Windows Server 2025 (Server Core installation) | 26100.2894 | [KB5050009](https://patchblox.com/security/data/fix/microsoft/kb5050009.md) | Jan 14, 2025 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo