CVE-2025-24991CISA KEV
Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability
CISA lists this Microsoft vulnerability as known exploited. Its MSRC release detail is outside this installation's collected history.
CISA catalog record
Microsoft Windows New Technology File System (NTFS) contains an out-of-bounds read vulnerability that allows an authorized attacker to disclose information locally.
- Product
- Windows
- Added to KEV
- 11 Mar 2025
- Federal remediation due
- 1 Apr 2025
- Known ransomware use
- Not reported