PT-2025-15557 · Microsoft · Windows Ntfs +1

Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: The issue is an out-of-bounds read in Windows NTFS that allows an unauthorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about a...

PT-2025-15542 · Microsoft · Windows Ntfs +1

Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: The issue is an out-of-bounds read in Windows NTFS that allows an unauthorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about a...

CVE-2025-24992

Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally...

CVE-2025-24991

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2025-24984

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack...

CVE-2025-24993

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

Microsoft Patch Tuesday for March 2025 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for March of 2025 which includes 57 vulnerabilities affecting a range of products, including 6 that Microsoft marked as "critical". There are six vulnerabilities that Microsoft has observed being exploited in the wild. CVE-2025-26633 is a Remoted...

CVE-2025-24991

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2025-24991

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2025-24993

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

CVE-2025-24992

Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally...

CVE-2025-24984

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack...

CVE-2025-24993 Windows NTFS Remote Code Execution Vulnerability

...

CVE-2025-24993

CVE-2025-24993 is a Windows NTFS heap-based buffer overflow that allows a locally authenticated attacker to execute arbitrary code. Affected component is NTFS on Windows; root cause is a heap-based overflow in NTFS handling. CVSS v3.1 indicates local attack vector, no privileges required, user in...

CVE-2025-24993 Windows NTFS Remote Code Execution Vulnerability

...

CVE-2025-24992

CVE-2025-24992 is a local, information-disclosure vulnerability in Windows NTFS caused by a buffer over-read. The CVE is tied to Windows NTFS and is described as allowing an unauthorized local disclosure of information. CVSS 3.1 base metrics indicate a Local attack vector, Low attack complexity, ...

CVE-2025-24991 Windows NTFS Information Disclosure Vulnerability

...

CVE-2025-24992 Windows NTFS Information Disclosure Vulnerability

...

CVE-2025-24992 Windows NTFS Information Disclosure Vulnerability

...

CVE-2025-24991

CVE-2025-24991 is an NTFS out-of-bounds read vulnerability in Windows that can disclose local information after mounting a malicious VHD. Exploitation requires local access and user interaction (per CVSS) or mounting a crafted disk image (per patch-cycle reporting). Microsoft has issued updates; ...