CVE-2025-21391 Microsoft Windows
Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Windows Storage Link Following Vulnerability
- Added
- 2025-02-11
- Federal patch deadline
- 2025-03-04
- Ransomware use
- not known