CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows NTFS Heap-Based Buffer Overflow Vulnerability (CVE-2025-24993) Technical Advisory
[Affected Scope] Systems running Windows Operating Systems utilizing the NTFS file system driver (ntfs.sys)
[Impact] A local authorized attacker can exploit this vulnerability to trigger a heap-based buffer overflow, leading to local privilege escalation (LPE) and arbitrary code execution with SYSTEM privileges
[Mitigation] Immediately apply the latest Microsoft cumulative security updates and restrict the mounting of untrusted external storage media and disk images
Windows NTFS Information Disclosure Vulnerability (CVE-2025-24984) Technical Advisory
[Affected Scope] All Windows operating system deployments utilizing the NTFS file system
[Impact] An unauthorized attacker with physical access can extract sensitive information written in plaintext within NTFS system log files
[Mitigation] Apply the latest Microsoft cumulative security updates immediately and enforce BitLocker Full Disk Encryption (FDE)
Windows NTFS Kernel Integer Underflow (CWE-191) Local Privilege Escalation Vulnerability (CVE-2021-31956) Technical Analysis and Mitigation Guide
[Affected Scope] NTFS file system driver in Windows 10, Windows 11, and Windows Server families
[Impact] Local attackers can trigger kernel memory corruption to execute arbitrary code with SYSTEM privileges
[Mitigation] Immediately apply the official Microsoft Latest Cumulative Update (LCU) and restrict local access