← back
CVE-2025-24993

Windows NTFS Remote Code Execution Vulnerability

CVSS 7.8 HIGHEPSS 2.1%● KEVCWE-122
In short

A flaw in Windows NTFS file system allows an attacker to overflow a memory buffer and run malicious code on your computer. This requires local access but can completely compromise your system.

Technical detail

Heap-based buffer overflow in the NTFS driver (CWE-122) allows an authenticated local attacker to write beyond allocated memory boundaries, enabling arbitrary code execution with kernel-level privileges. Exploitation requires local file system access to craft malicious NTFS structures.

Summary generated and translated by AI from the official description.
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →