CVE-2025-21391High· 7.1▾ Abyssal⚠ Exploited in the wild0dayWindows Storage Elevation of Privilege Vulnerability
▾ Abyssal zone — Critical with a public exploit or in-the-wild use
impact 39.1 · likelihood 0.5 · exploitation 25
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 24.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Federal remediation due Mar 4, 2025
Last analysed / modified upstream
2.3%
Added to the CISA catalog on Feb 11, 2025. Federal remediation due Mar 4, 2025. View catalog ↗
Windows Storage Elevation of Privilege Vulnerability
windows_10_1507 < 10.0.10240.20915windows_10_1607 < 10.0.14393.7785windows_10_1809 < 10.0.17763.6893windows_10_21h2 < 10.0.19044.5487windows_10_22h2 < 10.0.19045.5487windows_11_22h2 < 10.0.22621.4890windows_11_23h2 < 10.0.22631.4890windows_11_24h2 < 10.0.26100.3107windows_server_2016 < 10.0.14393.7785windows_server_2019 < 10.0.17763.6893windows_server_2022 < 10.0.20348.3148windows_server_2022_23h2 < 10.0.25398.1425windows_server_2025 < 10.0.26100.3107Upgrade past the affected range:
windows_10_1507 10.0.10240.20915windows_10_1607 10.0.14393.7785windows_10_1809 10.0.17763.6893windows_10_21h2 10.0.19044.5487windows_10_22h2 10.0.19045.5487windows_11_22h2 10.0.22621.4890windows_11_23h2 10.0.22631.4890windows_11_24h2 10.0.26100.3107windows_server_2016 10.0.14393.7785windows_server_2019 10.0.17763.6893windows_server_2022 10.0.20348.3148windows_server_2022_23h2 10.0.25398.1425windows_server_2025 10.0.26100.3107Connected by shared product, vendor, weakness, or advisory.
CVE-2021-41379Medium· 5.5Windows Installer Elevation of Privilege Vulnerability
CVE-2020-0787High· 7.8An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.
CVE-2019-1130High· 7.8An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'
CVE-2019-1069High· 7.8An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations
CVE-2019-1385High· 7.8An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need …
CVE-2024-30093High· 7.3Windows Storage Elevation of Privilege Vulnerability