CVE-2025-21391: high-severity vulnerability in Microsoft Windows 10 Version 1507
Windows Storage Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
A flaw in Windows Storage allows an attacker with local access to gain higher-level permissions on the system. This is dangerous because it enables unauthorized access to sensitive files and system functions.
An elevation of privilege vulnerability in Windows Storage via an insecure link or directory handling mechanism (CWE-59). An authenticated local attacker can exploit this to execute code or access resources with elevated privileges; exploitation requires prior local access to the affected system.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.