https://pwn.watch/i/microsoft-windows-cve-2025-24983 CVE-2025-24983: Microsoft Windows Win32 Kernel Subsystem contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. CVE-2025-24984: Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file vulnerability that allows an unauthorized attacker to disclose information with a physical attack. An attacker who successfully exploited this vulnerability could potentially read portions of heap memory. CVE-2025-24985: Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows an unauthorized attacker to execute code locally. CVE-2025-24991: Microsoft Windows New Technology File System (NTFS) contains an out-of-bounds read vulnerability that allows an authorized attacker to disclose information locally. CVE-2025-24993: Microsoft Windows New Technology File System (NTFS) contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally. CVE-2025-26633: Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally. Added to CISA KEV on 2025-03-11. en Tue, 11 Mar 2025 00:00:00 GMT https://pwn.watch/i/microsoft-windows-cve-2025-24983 https://pwn.watch/i/microsoft-windows-cve-2025-24983#2025-03-11-c6cafbf0 Tue, 11 Mar 2025 00:00:00 GMT critical <p>Microsoft Windows: 6 exploited vulnerabilities (CVE-2025-24983, CVE-2025-24984, CVE-2025-24985, CVE-2025-24991, CVE-2025-24993, CVE-2025-26633): CISA added CVE-2025-24983 to the KEV catalog (due 2025-04-01).</p> https://pwn.watch/i/microsoft-windows-cve-2025-24983 https://pwn.watch/i/microsoft-windows-cve-2025-24983#2025-03-11-e486cccf Tue, 11 Mar 2025 00:00:00 GMT critical <p>Microsoft Windows: 6 exploited vulnerabilities (CVE-2025-24983, CVE-2025-24984, CVE-2025-24985, CVE-2025-24991, CVE-2025-24993, CVE-2025-26633): CISA added CVE-2025-24984 to the KEV catalog (due 2025-04-01).</p> https://pwn.watch/i/microsoft-windows-cve-2025-24983 https://pwn.watch/i/microsoft-windows-cve-2025-24983#2025-03-11-f7ee6152 Tue, 11 Mar 2025 00:00:00 GMT critical <p>Microsoft Windows: 6 exploited vulnerabilities (CVE-2025-24983, CVE-2025-24984, CVE-2025-24985, CVE-2025-24991, CVE-2025-24993, CVE-2025-26633): CISA added CVE-2025-24985 to the KEV catalog (due 2025-04-01).</p> https://pwn.watch/i/microsoft-windows-cve-2025-24983 https://pwn.watch/i/microsoft-windows-cve-2025-24983#2025-03-11-4c9fd8f5 Tue, 11 Mar 2025 00:00:00 GMT critical <p>Microsoft Windows: 6 exploited vulnerabilities (CVE-2025-24983, CVE-2025-24984, CVE-2025-24985, CVE-2025-24991, CVE-2025-24993, CVE-2025-26633): CISA added CVE-2025-24991 to the KEV catalog (due 2025-04-01).</p> https://pwn.watch/i/microsoft-windows-cve-2025-24983 https://pwn.watch/i/microsoft-windows-cve-2025-24983#2025-03-11-37a6885b Tue, 11 Mar 2025 00:00:00 GMT critical <p>Microsoft Windows: 6 exploited vulnerabilities (CVE-2025-24983, CVE-2025-24984, CVE-2025-24985, CVE-2025-24991, CVE-2025-24993, CVE-2025-26633): CISA added CVE-2025-24993 to the KEV catalog (due 2025-04-01).</p> https://pwn.watch/i/microsoft-windows-cve-2025-24983 https://pwn.watch/i/microsoft-windows-cve-2025-24983#2025-03-11-d9f0d59c Tue, 11 Mar 2025 00:00:00 GMT critical <p>Microsoft Windows: 6 exploited vulnerabilities (CVE-2025-24983, CVE-2025-24984, CVE-2025-24985, CVE-2025-24991, CVE-2025-24993, CVE-2025-26633): CISA added CVE-2025-26633 to the KEV catalog (due 2025-04-01).</p>