CVE-2025-21391
KEVMicrosoft Windows Storage Link Following Vulnerability
Description
Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable.
Windows Storage Elevation of Privilege Vulnerability
CVSS 3.1 vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HPublishedFeb 11, 2025
Last modifiedSep 24, 2026
Added to KEVFeb 11, 2025
Remediation dueMar 4, 2025
References
- msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21391PatchVendor Advisory
- cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-21391US Government Resource
0 recent articles mention this CVE
66
Risk assessment · High
Actively exploited. Patch immediately.
- Exploitation
- Confirmed in the wild (CISA KEV)
- Federal remediation deadline
- Overdue by 601 days
- CVSS
- 7.1 HIGH
- EPSS (30-day exploit probability)
- 2.3% · top 17% of all CVEs
- Weakness
- CWE-59
Recommended actions
- 1.Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- 2.Treat as emergency change: patch or isolate internet-facing instances first.
- 3.Hunt for compromise: review logs for the disclosure window, not just from the patch date.
Assessment is derived automatically from the live signals above; verify against your own asset inventory.