coldbraid

CVE-2025-21391 Microsoft Windows

Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable.

CVSS
not scored

CWE-59

On CISA’s exploited list

Microsoft Windows Storage Link Following Vulnerability

Added
2025-02-11
Federal patch deadline
2025-03-04
Ransomware use
not known