CVE-2025-21391

Microsoft Windows Storage Link Following Vulnerability
2.3%
EPSS
83%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable.

Vendor
Microsoft
Product
Windows
Added to KEV
Feb 11, 2025
Remediation due
Mar 4, 2025 (US federal deadline)
Ransomware use
Not known
Weakness
CWE-59
EPSS
2.3% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded