A vulnerability was found in Microsoft Windows Server 2022 23H2/Server 2025. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Internet Explorer. The manipulation leads to type confusion.
This vulnerability is known as CVE-2025-21326. The attack can be launched remotely. There is no exploit available.
It is recommended to apply a patch to fix this issue.