Actively exploited in the wild
Microsoft Windows Storage Link Following Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2025-02-11. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2025-21391
HighCVSS 7.1KEVSummary
Windows Storage Elevation of Privilege Vulnerability.
Risk Assessment
The risk includes potential privilege escalation by a local attacker, which could lead to unauthorized access to data and system.
Recommendation
Apply the security updates released by Microsoft for Windows systems.
Other vulnerabilities in Windows Storage
See all- CVE-2026-78516Medium
A buffer over-read vulnerability in Windows Storage allows an unauthorized attacker to disclose information through a physical attack.
- CVE-2026-69328High
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-62695High
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-61359High
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-58526High
A use-after-free vulnerability in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-47648High
Untrusted search path vulnerability in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2024-38248High
An elevation of privilege vulnerability in Windows Storage.
- CVE-2024-30093High
A vulnerability in Windows Storage allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
- CVE-2021-38637Medium
Information Disclosure vulnerability in Windows Storage. Could allow an attacker to read data from memory.
Original NVD description (English source)
Windows Storage Elevation of Privilege Vulnerability