CVE-2025-21194: Microsoft Surface Go 2 1901 Firmware

High severity, CVSS 7.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Microsoft Surface Security Feature Bypass Vulnerability

Affected products

Microsoft Surface Go 2 1901 Firmware: affected versions not specified
Microsoft Surface Go 2 1926 Firmware: affected versions not specified
Microsoft Surface Go 2 1927 Firmware: affected versions not specified
Microsoft Surface Go 3 1901 Firmware: affected versions not specified
Microsoft Surface Go 3 1926 Firmware: affected versions not specified
Microsoft Surface Go 3 2022 Firmware: affected versions not specified
Microsoft Surface Go 3 Firmware: affected versions not specified
Microsoft Surface Hub 2s 85 Firmware: affected versions not specified
Microsoft Surface Hub 2s Firmware: affected versions not specified
Microsoft Surface Hub 3 50 Firmware: affected versions not specified
Microsoft Surface Hub 3 85 Firmware: affected versions not specified
Microsoft Surface Laptop 3 1867 Firmware: affected versions not specified
Microsoft Surface Laptop 3 1872 Firmware: affected versions not specified
Microsoft Surface Laptop 4 1950 Firmware: affected versions not specified
Microsoft Surface Laptop 4 1952 Firmware: affected versions not specified
Microsoft Surface Laptop 4 1958 Firmware: affected versions not specified
Microsoft Surface Laptop 4 1978 Firmware: affected versions not specified
Microsoft Surface Laptop Go 2 Firmware: affected versions not specified
Microsoft Surface Laptop Go 3 Firmware: affected versions not specified
Microsoft Surface Laptop Go Firmware: affected versions not specified
Microsoft Surface Pro 7+ Firmware: affected versions not specified
Microsoft Surface Pro 8 1983 Firmware: affected versions not specified
Microsoft Surface Pro 8 For Business 1983 Firmware: affected versions not specified
Microsoft Surface Pro 8 For Business With Lte Advanced 1982 Firmware: affected versions not specified
Microsoft Surface Pro 9 With 5g 1996 Firmware: affected versions not specified
and 2 more

Published 2025-02-11. Last modified 2026-06-17.