CVE-2025-24984—Microsoft Windows NTFS Information Disclosure Vulnerability

Vulnerability Name

Microsoft Windows NTFS Information Disclosure Vulnerability

Description

Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file vulnerability that allows an unauthorized attacker to disclose information with a physical attack. An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

Unknown

Action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Additional Notes

• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24984
• https://nvd.nist.gov/vuln/detail/CVE-2025-24984

Related News Articles

• Microsoft patches Windows Kernel zero-day exploited since 2023March 12, 2025
• URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero-DaysMarch 12, 2025

Related Weaknesses

• CWE-532