OS-WINDOWS Microsoft Windows MapUrlToZone security feature bypass attempt

IPS-CFWIPS-SWG

3 SIDs: 64453, 64455, 64457

Stats

First seen: October 2025
Last seen: April 2026

Description

Detects an attempt to exploit CVE-2025-21219, CVE-2025-21189, and CVE-2025-21269, a security bypass that can circumvent protections in Microsoft Windows MapUrlToZone security feature.

CVEs

CVE-2025-21269 CVE-2025-21189 CVE-2025-21219

Related malware families

Microsoft

References

msrc.microsoft.com
msrc.microsoft.com
msrc.microsoft.com