CVE-2025-24985—Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

Vulnerability Name

Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

Description

Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows an unauthorized attacker to execute code locally.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

Unknown

Action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Additional Notes

• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24985
• https://nvd.nist.gov/vuln/detail/CVE-2025-24985

Related News Articles

• Microsoft patches Windows Kernel zero-day exploited since 2023March 12, 2025
• URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero-DaysMarch 12, 2025

Related Weaknesses

• CWE-190
• CWE-122