Analysis Summary

CVE-2025-21180 CVSS:7.8

Microsoft Windows could allow a local attacker to execute arbitrary code on the system, caused by a heap-based buffer overflow in Windows exFAT File System.

CVE-2025-24046 CVSS:7.8

Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by an use -after-free in Microsoft Streaming Service.

CVE-2025-24048 CVSS:7.8

Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by a heap-based buffer overflow in Role: Windows Hyper-V.

CVE-2025-24050 CVSS:7.8

Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by a heap-based buffer overflow in Role: Windows Hyper-V.

CVE-2025-24051 CVSS:8.8

Microsoft Windows could allow a remote attacker to execute arbitrary code on the system, caused by a heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS).

Impact

• Code Execution
• Privilege Escalation

Indicators of Compromise

CVE

• CVE-2025-21180

• CVE-2025-24046

• CVE-2025-24048

• CVE-2025-24050

• CVE-2025-24051

Affected Vendors

Remediation

Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.

CVE-2025-21180

CVE-2025-24046

CVE-2025-24048

CVE-2025-24050

CVE-2025-24051