Here is a summary of the original Petri article on the Windows 11 'inetpub' folder security risk:
What happened?
After the April 2025 Patch Tuesday update, a new "inetpub" folder started appearing on Windows 10 and 11 machines.
Microsoft created this folder to help patch a bug (CVE-2025-21204)...
administrative permissions
cve-2025-21204
cyberattack prevention
cybersecurity
cybersecurity best practices
directory junctions
endpoint security
extended security updates
file security
folder permissions
iis
inetpub folder
insider threats
it admin tips
itprotection
junction points
local exploit
malware
malware risks
microsoft
microsoft april 2025 update
microsoft patch
microsoft security
os security
patch management
permission hardening
permissions
security
security alert
security mitigation
security patch
security researcher
security updates
security workaround
symbolic link exploit
symbolic links
symlink exploits
symlinks
sysadmin tips
system administration
system integrity
system protection
system update bypass
update management
vulnerabilities
vulnerability
windows 10
windows 11
windows defender
windows security
windows servicing
windows system folder
windows system risks
windows update
windows update risks
windows vulnerabilities
Original release date: April 27, 2017 | Last revised: May 14, 2017
Systems Affected
Networked Systems
Overview
The National Cybersecurity and Communications Integration Center (NCCIC) has become aware of an emerging sophisticated campaign, occurring since at least May 2016, that uses...
