CVE-2025-24993 - Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

Vulnerability Name

Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

Description

Microsoft Windows New Technology File System (NTFS) contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Additional Notes

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24993

https://nvd.nist.gov/vuln/detail/CVE-2025-24993

Related News Articles

Microsoft patches Windows Kernel zero-day exploited since 2023March 12, 2025

URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero-DaysMarch 12, 2025