Windows Storage Elevation of Privilege Vulnerability
CVE-2025-21391 is an elevation of privilege vulnerability in Windows Storage (rated Important, CVSS 7.1). Microsoft reports that it is being exploited.
Exploited1 version
Facts
- Microsoft id
CVE-2025-21391- Status
- Exploited
- Products
- Windows Storage
- Severity
- Important
- Impact
- Elevation of Privilege
- CVSS
- 7.1
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C
- Exploited
- Yes
- Publicly disclosed
- No
- Exploitability
- Exploitation Detected
- Customer action required
- Yes
- Release
- 2025-Feb
- Assigned by
- Microsoft
- Weakness
- CWE-59: Improper Link Resolution Before File Access ('Link Following')
- MSRC revision
- 1.0
- First captured by us
- (from our first import of this list)
- Microsoft last modified
- Source
- Security updates · open the original at Microsoft
Microsoft's revision notes
- Revision 1.0, 2025-02-11:
Information published.
Microsoft says
What privileges could be gained by an attacker who successfully exploited the vulnerability? An attacker would be able to delete targeted files on a system.
What Microsoft changed
One version so far. If Microsoft edits it, each change shows here with what was removed and added.
First version we captured ·
As first seen: Exploited
- Status
- Exploited
Seen by us · Microsoft's timestamp · Microsoft's page