Firetruck

CVE-2025-21391

KEV

Microsoft Windows Storage Link Following Vulnerability

View CVE record →
Vendor / Project
Microsoft
Product
Windows
Date added
Feb 11, 2025
Due date
Mar 4, 2025
Known ransomware use
Unknown
CWEs
CWE-59

Description

Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes