CVE-2025-21391

ENISA EUVD: EUVD-2025-2452 ↗

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero

Triaged: March 3, 2026 4 articles Published: 2025-02-11

VulnLookup ↗ NVD ↗ EUVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-23

4.72%

probability

This CVE has a 4.72% probability of being exploited in the next 30 days.

0% Top 89.5th percentile of all CVEs 100%

CVSS v3.1

Source: VulnerabilityLookup (CIRCL)

7.1

HIGH

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Temporal

Exploit Code Maturity

Functional

Remediation Level

Official Fix

Report Confidence

Confirmed

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C

Description

NVD

Windows Storage Elevation of Privilege Vulnerability

Affected Products

Microsoft

Windows 10 Version 1507

10.0.10240.0

Microsoft

Windows 10 Version 1607

10.0.14393.0

Microsoft

Windows 10 Version 1809

10.0.17763.0

Microsoft

Windows 10 Version 21H2

10.0.19044.0

Microsoft

Windows 10 Version 22H2

10.0.19045.0

microsoft

windows 10 1507

microsoft

windows 10 1607

microsoft

windows 10 1809

microsoft

windows 10 21h2

microsoft

windows 10 22h2

Microsoft

Windows Server 2025 (Server Core installation)

10.0.26100.0 <10.0.26100.3194

Microsoft

Windows 10 Version 21H2

10.0.19044.0 <10.0.19044.5487

Microsoft

Windows Server 2022, 23H2 Edition (Server Core installation)

10.0.25398.0 <10.0.25398.1425

Microsoft

Windows Server 2019

10.0.17763.0 <10.0.17763.6893

Microsoft

Windows 10 Version 22H2

10.0.19045.0 <10.0.19045.5487

Microsoft

Windows 11 version 22H3

10.0.22631.0 <10.0.22631.4890

Microsoft

Windows Server 2022

10.0.20348.0 <10.0.20348.3207

Microsoft

Windows Server 2019 (Server Core installation)

10.0.17763.0 <10.0.17763.6893

Microsoft

Windows Server 2025

10.0.26100.0 <10.0.26100.3194

Microsoft

Windows 10 Version 1607

10.0.14393.0 <10.0.14393.7785

Microsoft

Windows 10 Version 1809

10.0.17763.0 <10.0.17763.6893

Microsoft

Windows Server 2016

10.0.14393.0 <10.0.14393.7785

Microsoft

Windows Server 2016 (Server Core installation)

10.0.14393.0 <10.0.14393.7785

Microsoft

Windows 11 version 22H2

10.0.22621.0 <10.0.22621.4890

Microsoft

Windows 11 Version 24H2

10.0.26100.0 <10.0.26100.3194

Microsoft

Windows 10 Version 21H2

10.0.19043.0 <10.0.19044.5487

Microsoft

Windows 11 Version 23H2

10.0.22631.0 <10.0.22631.4890

Microsoft

Windows 10 Version 1507

10.0.10240.0 <10.0.10240.20915

Attack Intelligence

CWE-59 · Link Following CWE-664 · Improper Control of a Resource Through its Lifetime CWE-706 · Use of Incorrectly-Resolved Name or Reference

Google Project Zero

Patched

Feb. 11, 2025

Reported by

???

Root Cause Analysis

???

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21391

vendor-advisory patch

Signal Intelligence

Confidenceⓘ

78%

EPSS 4.72%

CVSS v3.1 7.1

Mentions 4

Last Seen Feb 11, 2025

CNA Information

CNA Assigner

microsoft

CNA Title

Windows Storage Elevation of Privilege Vulnerability

Analyst Note

CVE-2025-21391 is confirmed as a zero-day elevation of privilege vulnerability in Windows 10, addressing a legitimate security flaw with a HIGH CVSS score of 7.1. The vulnerability was addressed in Microsoft's February 2025 Patch Tuesday release and is documented in reputable security publications, providing credible confirmation of its legitimacy.