Multiple Microsoft Products Zero-Day Vulnerabilities Exploit in the Wild

Severity

Medium

Analysis Summary

CVE-2025-24983 CVSS:7

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2025-24984 CVSS:4.6

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2025-24985 CVSS:7.8

Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

CVE-2025-24991 CVSS:5.5

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2025-24993 CVSS:7.8

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2025-26633 CVSS:7

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

Impact

Security Bypass
Code Execution
Privilege Escalation
Information Disclosure

Indicators of Compromise

CVE

CVE-2025-24983
CVE-2025-24984
CVE-2025-24985
CVE-2025-24991
CVE-2025-24993
CVE-2025-26633

Affected Vendors

Microsoft

Affected Products

Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows 10 for 32-bit Systems
Microsoft Windows 10 for x64-based Systems
Microsoft Windows 10 Version 1607 for 32-bit Systems
Microsoft Windows 10 Version 1607 for x64-based Systems
Microsoft Windows 10 Version 1809 for 32-bit Systems
Microsoft Windows 10 Version 1809 for x64-based Systems
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2022
Microsoft Windows Server 2019 (Server Core installation)
Microsoft Windows Server 2022 (Server Core installation)
Microsoft Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Microsoft Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft Windows Server 2012 (Server Core installation)
Microsoft Windows Server 2012 R2 (Server Core installation)
Microsoft Windows Server 2016 (Server Core installation)
Microsoft Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 23H2
Microsoft Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 23H2
Microsoft Windows Server 2025
Microsoft Windows 11 Version 24H2 for x64-based Systems
Microsoft Windows 11 Version 24H2 for ARM64-based Systems
Microsoft Windows 11 Version 23H2 for x64-based Systems
Microsoft Windows 11 Version 23H2 for ARM64-based Systems
Microsoft Windows Server 2025 (Server Core installation)
Microsoft Windows 10 Version 22H2 for x64-based Systems
Microsoft Windows 11 Version 22H2 for x64-based Systems
Microsoft Windows 11 Version 22H2 for ARM64-based Systems
Microsoft Windows 10 Version 21H2 for x64-based Systems
Microsoft Windows 10 Version 22H2 for 32-bit Systems
Microsoft Windows 10 Version 22H2 for ARM64-based Systems
Microsoft Windows 10 Version 21H2 for ARM64-based Systems
Microsoft Windows 10 Version 21H2 for 32-bit Systems

Remediation

Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.