CVE-2025-24995
Published: 11 March 2025
Description
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
Security Summary
CVE-2025-24995, published on 2025-03-11, is a heap-based buffer overflow vulnerability (CWE-122) in the Kernel Streaming WOW Thunk Service Driver on Microsoft Windows systems. The issue carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating high confidentiality, integrity, and availability impacts from local exploitation.
A local attacker with low privileges (PR:L) can exploit this vulnerability due to low attack complexity and no user interaction required. Successful exploitation allows privilege escalation, potentially granting the attacker higher-level access on the affected system.
Microsoft's advisory provides details on mitigation and available patches; see https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24995 for guidance on updates and workarounds.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise Techniques
Why these techniques?
Local heap buffer overflow in kernel driver directly enables privilege escalation from low-privileged context (T1068: Exploitation for Privilege Escalation).