CVE-2021-38637
MediumCVSS 5.5Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
Information Disclosure vulnerability in Windows Storage. Could allow an attacker to read data from memory.
Risk Assessment
Risk of leaking data stored in Windows storage systems.
Recommendation
Install Windows security updates.
Other vulnerabilities in Windows Storage
See all- CVE-2025-21391HighActively exploited
Windows Storage Elevation of Privilege Vulnerability.
- CVE-2026-78516Medium
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
- CVE-2026-69328High
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-62695High
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-61359High
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-58526High
A use-after-free vulnerability in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-47648High
Untrusted search path vulnerability in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2024-38248High
An elevation of privilege vulnerability in Windows Storage.
- CVE-2024-30093High
A vulnerability in Windows Storage allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Original NVD description (English source)
Windows Storage Information Disclosure Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

