CVE-2025-24991

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

  • Published Mar 11, 2025
  • CVSS 5.5 medium
  • 2.0% chance of exploitation in the next 30 days (EPSS)
  • In CISA's Known Exploited Vulnerabilities catalog

Affected software

CVE-2025-24991 at the National Vulnerability Database