CVE-2025-21391CISA KEV
Microsoft Windows Storage Link Following Vulnerability
CISA lists this Microsoft vulnerability as known exploited. Its MSRC release detail is outside this installation's collected history.
CISA catalog record
Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable.
- Product
- Windows
- Added to KEV
- 11 Feb 2025
- Federal remediation due
- 4 Mar 2025
- Known ransomware use
- Not reported