CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2025-213917.1/HIGHEPSS 2.3%CISA KEV
2025-02-11

Windows Storage Elevation of Privilege Vulnerability (CVE-2025-21391) Security Advisory

[Affected Scope] Windows 10, Windows 11, and Windows Server operating systems utilizing Windows Storage components

[Impact] Local attackers with low privileges can exploit symbolic link creation to overwrite critical system files, leading to arbitrary code execution with SYSTEM privileges

[Mitigation] Apply the Microsoft February 2025 security updates immediately and restrict local symbolic link creation privileges on unpatched systems

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse