Microsoft Windows: 2 exploited vulnerabilities (CVE-2025-21391, CVE-2025-21418) ยท updates https://pwn.watch/i/microsoft-windows-cve-2025-21391 CVE-2025-21391: Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable. CVE-2025-21418: Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges. Added to CISA KEV on 2025-02-11. en Tue, 11 Feb 2025 00:00:00 GMT Microsoft Windows: 2 exploited vulnerabilities (CVE-2025-21391, CVE-2025-21418): CISA added CVE-2025-21391 to the KEV catalog (due 2025-03-04). https://pwn.watch/i/microsoft-windows-cve-2025-21391 https://pwn.watch/i/microsoft-windows-cve-2025-21391#2025-02-11-81d286e7 Tue, 11 Feb 2025 00:00:00 GMT high <p>Microsoft Windows: 2 exploited vulnerabilities (CVE-2025-21391, CVE-2025-21418): CISA added CVE-2025-21391 to the KEV catalog (due 2025-03-04).</p> Microsoft Windows: 2 exploited vulnerabilities (CVE-2025-21391, CVE-2025-21418): CISA added CVE-2025-21418 to the KEV catalog (due 2025-03-04). https://pwn.watch/i/microsoft-windows-cve-2025-21391 https://pwn.watch/i/microsoft-windows-cve-2025-21391#2025-02-11-8c65e6f1 Tue, 11 Feb 2025 00:00:00 GMT high <p>Microsoft Windows: 2 exploited vulnerabilities (CVE-2025-21391, CVE-2025-21418): CISA added CVE-2025-21418 to the KEV catalog (due 2025-03-04).</p>