CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows NTFS Out-of-Bounds Read Vulnerability (CVE-2025-24991) Analysis and Mitigation Guide
[Affected Scope] Windows 10, Windows 11, and Windows Server families utilizing the NTFS file system driver
[Impact] Local authorized attackers can disclose sensitive kernel memory information, potentially facilitating subsequent privilege escalation (EoP) attacks
[Mitigation] Immediately apply the February 2025 Microsoft Patch Tuesday security updates and restrict local access for unauthorized users
Windows NTFS Information Disclosure Vulnerability (CVE-2025-24984) Technical Advisory
[Affected Scope] All Windows operating system deployments utilizing the NTFS file system
[Impact] An unauthorized attacker with physical access can extract sensitive information written in plaintext within NTFS system log files
[Mitigation] Apply the latest Microsoft cumulative security updates immediately and enforce BitLocker Full Disk Encryption (FDE)