CVE-2025-24984CISA KEV
Microsoft Windows NTFS Information Disclosure Vulnerability
CISA lists this Microsoft vulnerability as known exploited. Its MSRC release detail is outside this installation's collected history.
CISA catalog record
Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file vulnerability that allows an unauthorized attacker to disclose information with a physical attack. An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.
- Product
- Windows
- Added to KEV
- 11 Mar 2025
- Federal remediation due
- 1 Apr 2025
- Known ransomware use
- Not reported