Exploited vulnerability

CVE-2025-24985

TLP:CLEAR

Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows an unauthorized attacker to execute code locally.

Facts

Vendor: Microsoft
Product: Windows
CVSS: 7.8
EPSS (probability of exploitation within 30 days): 3.9 %
On CISA's Known Exploited Vulnerabilities list since: 11 March 2025
First known exploitation: 11 March 2025
CISA's deadline for US federal agencies: 1 April 2025
Weakness: CWE-190
First seen by Risk Letters: 11 March 2025

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD