EXPOSURES › CVE-2025-24993
CVE-2025-24993
HIGH ⌖ ON CISA KEV · EXPLOITEDA Microsoft Windows NTFS heap buffer overflow vulnerability is actively being exploited, allowing local code execution by an attacker.
This CVE allows unauthorized local code execution via a buffer overflow in the NTFS file system, and is currently being exploited in the wild. DIB organizations using vulnerable Windows systems face immediate risk of compromise and must prioritize patching. Failure to address this promptly can lead to significant compliance failures under NIST 800-171 and potential data breaches.
Shame score — The active exploitation of a buffer overflow vulnerability in a core operating system component demonstrates a significant security oversight and potential for widespread compromise.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Windows New Technology File System (NTFS) contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |