CVE-2025-24983

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  • Published Mar 11, 2025
  • CVSS 7.0 high
  • 1.4% chance of exploitation in the next 30 days (EPSS)
  • In CISA's Known Exploited Vulnerabilities catalog
  • A fix is available

Affected software

CVE-2025-24983 at the National Vulnerability Database