CVE Watch24 sept 2026

CVE-2025-24993

Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

CVSS

7.8

Alto

EPSS

2.2%

p82

KEV

SÍ

11 mar 2025

Exploit Today

0-100

Publicado: 11 mar 2025 · Última mod.: 24 sept 2026 · CWE-122

EPSS · 30d

2.2%EPSS · 30 días2.2%

2026-09-172026-10-15

Ficha del catálogo KEV

Producto

Microsoft / Windows

Vulnerabilidad

Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

Añadido a KEV

11 mar 2025

Remediar antes de

1 abr 2025

Uso conocido en ransomware

Descripción resumida

Microsoft Windows New Technology File System (NTFS) contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24993 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24993

Descripción técnica

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1084518.8 ALT

—

———Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.5h CVE-2026-1084508.8 ALT

—

———Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.5h CVE-2026-1084498.8 ALT

—

———Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.5h CVE-2026-1084487.5 ALT

—

———Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.5h CVE-2026-1084478.8 ALT

—

———Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.5h CVE-2026-1084448.8 ALT

—

———Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.3h