Dashboard / CVE-2025-21391

CVE-2025-21391

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable.

CISA Known Exploited Vulnerability

Vendor / Product Microsoft — Windows
Date Added 2025-02-11
Remediation Due 2025-03-04
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21391 ; https://nvd.nist.gov/vuln/detail/CVE-2025-21391

Weakness Classification (1)

Affected Software (16)

VendorProductVersion
microsoft windows_10_1507 < 10.0.10240.20915
microsoft windows_10_1507 < 10.0.10240.20915
microsoft windows_10_1607 < 10.0.14393.7785
microsoft windows_10_1607 < 10.0.14393.7785
microsoft windows_10_1809 < 10.0.17763.6893
microsoft windows_10_1809 < 10.0.17763.6893
microsoft windows_10_21h2 < 10.0.19044.5487
microsoft windows_10_22h2 < 10.0.19045.5487
microsoft windows_11_22h2 < 10.0.22621.4890
microsoft windows_11_23h2 < 10.0.22631.4890
microsoft windows_11_24h2 < 10.0.26100.3107
microsoft windows_server_2016 < 10.0.14393.7785
microsoft windows_server_2019 < 10.0.17763.6893
microsoft windows_server_2022 < 10.0.20348.3148
microsoft windows_server_2022_23h2 < 10.0.25398.1425
microsoft windows_server_2025 < 10.0.26100.3107

References & Advisories (2)

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

2.28%
Raw Score 0.022840
Percentile 83.1%
Date 2026-10-28

Intelligence Sources

kev ref →

External Links