CVE-2025-24992CWE-126

Windows NTFS Information Disclosure Vulnerability

Medium · published March 11, 2025

CVSS v3.1

5.5

EPSS

1%

Percentile

64.5

In the wild

Unconfirmed

What it is

Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally.

The record

Technical detail

CVSS v3.1: 5.5 · MEDIUM
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
CVSS v4.0: Not supplied
EPSS: 0.01067 · 64.5th percentile
Weakness: CWE-126 · Buffer Over-read
Published: 2025-03-11T16:59Z

EPSS history

Timeline

11 MAR 16:59Z
Windows NTFS Information Disclosure Vulnerability
cvelistv5