Microsoft Windows NTFS Information Disclosure Vulnerability
Project:Microsoft
Product:Windows
Date Added:2025-03-11Due Date::2025-04-01
Vulnerability Name
Microsoft Windows NTFS Information Disclosure Vulnerability
Description
Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file vulnerability that allows an unauthorized attacker to disclose information with a physical attack. An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.
Known To Be Used in Ransomware Campaigns?
Unknown
Action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Additional Notes
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24984
https://nvd.nist.gov/vuln/detail/CVE-2025-24984
Related News Articles
Microsoft patches Windows Kernel zero-day exploited since 2023March 12, 2025
URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero-DaysMarch 12, 2025