CVE-2025-21391Windows Storage Elevation of Privilege Vulnerability

Windows Storage Elevation of Privilege Vulnerability

7.1 HIGHEPSS 2.28%⚡ Known Exploited (CISA KEV)NVD: Analyzed

Last updated: 2026-09-24 13:10 UTC

OverviewCVSS details

7.1HIGHCVSS 3.1

Windows 10 Version 1507 (Microsoft)

2.28%chance of exploitation in 30 days

Higher than 83.26% of CVEs

7.1High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

7.1High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C

Overview

Score	Severity	Version	Vector String
7.1	HIGH	3.1microsoft (CNA)	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
7.1	HIGH	3.1microsoft (CNA)	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C

⚡ Known exploited · remediation due Mar 4, 2025

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE ID: CVE-2025-21391
Status: Analyzed
Assigner (CNA): microsoft
Published: Feb 11, 2025
Last modified: 2026-09-24 13:10 UTC
Weaknesses: CWE-59 · Improper Link Resolution Before File Access ('Link Following')

Refreshed hourly from the sources above. Last fetched 2026-11-08 12:23 UTC.