CVE-2025-24056
Published: 11 March 2025
Description
Adversaries may abuse PowerShell commands and scripts for execution.
Security Summary
CVE-2025-24056 is a heap-based buffer overflow vulnerability (CWE-122) in the Windows Telephony Server component of Microsoft Windows. Published on March 11, 2025, it has a CVSS v3.1 base score of 8.8, reflecting its high severity due to network accessibility, low attack complexity, and potential for significant impact.
An unauthorized attacker can exploit this vulnerability over a network without requiring privileges (AV:N/AC:L/PR:N), though it necessitates user interaction (UI:R), such as clicking a malicious link or opening a crafted file. Successful exploitation allows arbitrary code execution with high impacts on confidentiality, integrity, and availability (C:H/I:H/A:H), potentially leading to full system compromise in the context of the affected server process.
Microsoft's update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24056 provides details on patches and recommended mitigations for addressing this vulnerability.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise Techniques
Why these techniques?
Heap buffer overflow in Windows Telephony Server enables RCE via malicious link or crafted file (user interaction), directly mapping to client exploitation and arbitrary command/script execution.