CVE-2025-24993: high-severity vulnerability in Microsoft Windows 10 Version 1507
Windows NTFS Remote Code Execution Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
A flaw in Windows NTFS file system allows an attacker to overflow a memory buffer and run malicious code on your computer. This requires local access but can completely compromise your system.
Heap-based buffer overflow in the NTFS driver (CWE-122) allows an authenticated local attacker to write beyond allocated memory boundaries, enabling arbitrary code execution with kernel-level privileges. Exploitation requires local file system access to craft malicious NTFS structures.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.