CVE-2025-24066

{"id": "CVE-2025-24066", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "secure@microsoft.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2025-03-11T17:16:29.223", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24066", "tags": ["Vendor Advisory"], "source": "secure@microsoft.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "secure@microsoft.com", "description": [{"lang": "en", "value": "CWE-122"}]}], "descriptions": [{"lang": "en", "value": "Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally."}, {"lang": "es", "value": "El desbordamiento del b\u00fafer basado en mont\u00f3n en los controladores de modo kernel de Windows permite que un atacante autorizado eleve privilegios localmente."}], "lastModified": "2025-07-02T15:05:31.930", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E25C5E4-77D3-4A18-B08B-B157E336218F", "versionEndExcluding": "10.0.10240.20947"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "0CF0E174-4692-4AA3-B72E-12E73A1BDBE5", "versionEndExcluding": "10.0.14393.7876"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "340EF5F8-D4F5-4AD8-9D80-1DEC2F376BE5", "versionEndExcluding": "10.0.14393.7876"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83256070-991F-404C-AE4C-CBB46166CA67", "versionEndExcluding": "10.0.19044.5608"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1F779E2-8536-4B06-A151-6115C9D88D29", "versionEndExcluding": "10.0.19045.5608"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B27CE48-66A0-488B-A7B6-18A5A191AFDA", "versionEndExcluding": "10.0.22621.5039"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77DC7D9D-F85F-41B4-A944-D27B388A1157", "versionEndExcluding": "10.0.22631.5039"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84168D48-1F68-4590-98BB-E926339D1A01", "versionEndExcluding": "10.0.26100.3403"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF468977-7A8C-4234-B244-FA75CB6A124E", "versionEndExcluding": "10.0.26100.3476", "versionStartExcluding": "10.0.26100.3403"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7610CDB-A02B-4C62-B17F-6DCE2B3DE4F0", "versionEndExcluding": "10.0.14393.7876"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF423F8C-2E8A-46AB-BB2D-C416BF341F92", "versionEndExcluding": "10.0.25398.1486"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF81B44C-8FF7-4C61-9974-3F98DA9D492C", "versionEndExcluding": "10.0.26100.3403"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1438B9AF-92B2-439B-8656-C87B8F8E30A5", "versionEndExcluding": "10.0.26100.3476", "versionStartExcluding": "10.0.26100.3403"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com"}