CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-03-11
Windows NTFS Heap-Based Buffer Overflow Vulnerability (CVE-2025-24993) Technical Advisory
[Affected Scope] Systems running Windows Operating Systems utilizing the NTFS file system driver (ntfs.sys)
[Impact] A local authorized attacker can exploit this vulnerability to trigger a heap-based buffer overflow, leading to local privilege escalation (LPE) and arbitrary code execution with SYSTEM privileges
[Mitigation] Immediately apply the latest Microsoft cumulative security updates and restrict the mounting of untrusted external storage media and disk images