CVE-2025-24985

ENISA EUVD: EUVD-2025-6321 ↗

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero

Triaged: March 3, 2026 5 articles Published: 2025-03-11

VulnLookup ↗ NVD ↗ EUVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-23

2.23%

probability

This CVE has a 2.23% probability of being exploited in the next 30 days.

0% Top 84.7th percentile of all CVEs 100%

CVSS v3.1

Source: VulnerabilityLookup (CIRCL)

7.8

HIGH

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Temporal

Exploit Code Maturity

Functional

Remediation Level

Official Fix

Report Confidence

Confirmed

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

Description

NVD

Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

Affected Products

Microsoft

Windows 10 Version 1507

10.0.10240.0

Microsoft

Windows 10 Version 1607

10.0.14393.0

Microsoft

Windows 10 Version 1809

10.0.17763.0

Microsoft

Windows 10 Version 21H2

10.0.19044.0

Microsoft

Windows 10 Version 22H2

10.0.19045.0

microsoft

windows 10 1507

microsoft

windows 10 1607

microsoft

windows 10 1809

microsoft

windows 10 21h2

microsoft

windows 10 22h2

Microsoft

Windows Server 2016 (Server Core installation)

10.0.14393.0 <10.0.14393.7876

Microsoft

Windows Server 2025 (Server Core installation)

10.0.26100.0 <10.0.26100.3476

Microsoft

Windows Server 2012 (Server Core installation)

6.2.9200.0 <6.2.9200.25368

Microsoft

Windows Server 2012 R2

6.3.9600.0 <6.3.9600.22470

Microsoft

Windows Server 2008 Service Pack 2

6.0.6003.0 <6.0.6003.23168

Microsoft

Windows 10 Version 1607

10.0.14393.0 <10.0.14393.7876

Microsoft

Windows Server 2019 (Server Core installation)

10.0.17763.0 <10.0.17763.7009

Microsoft

Windows 11 version 22H2

10.0.22621.0 <10.0.22621.5039

Microsoft

Windows Server 2012

6.2.9200.0 <6.2.9200.25368

Microsoft

Windows Server 2016

10.0.14393.0 <10.0.14393.7876

Microsoft

Windows 10 Version 1507

10.0.10240.0 <10.0.10240.20947

Microsoft

Windows 10 Version 1809

10.0.17763.0 <10.0.17763.7009

Microsoft

Windows 11 Version 23H2

10.0.22631.0 <10.0.22631.5039

Microsoft

Windows 11 Version 24H2

10.0.26100.0 <10.0.26100.3476

Microsoft

Windows Server 2008 Service Pack 2

6.0.6003.0 <6.0.6003.23168

Microsoft

Windows 10 Version 21H2

10.0.19043.0 <10.0.19044.5608

Microsoft

Windows Server 2019

10.0.17763.0 <10.0.17763.7009

Microsoft

Windows Server 2008 R2 Service Pack 1 (Server Core installation)

6.1.7601.0 <6.1.7601.27618

Microsoft

Windows Server 2012 R2 (Server Core installation)

6.3.9600.0 <6.3.9600.22470

Microsoft

Windows 11 version 22H3

10.0.22631.0 <10.0.22631.5039

Microsoft

Windows Server 2022, 23H2 Edition (Server Core installation)

10.0.25398.0 <10.0.25398.1486

Microsoft

Windows Server 2022

10.0.20348.0 <10.0.20348.3328

Microsoft

Windows Server 2025

10.0.26100.0 <10.0.26100.3476

Microsoft

Windows Server 2008 Service Pack 2 (Server Core installation)

6.0.6003.0 <6.0.6003.23168

Microsoft

Windows 10 Version 21H2

10.0.19044.0 <10.0.19044.5608

Microsoft

Windows Server 2008 R2 Service Pack 1

6.1.7601.0 <6.1.7601.27618

Microsoft

Windows 10 Version 22H2

10.0.19045.0 <10.0.19045.5608

Attack Intelligence

CWE-118 · Incorrect Access of Indexable Resource ('Range Error') CWE-119 · Buffer Overflow CWE-122 · Heap-based Buffer Overflow CWE-190 · Integer Overflow CWE-664 · Improper Control of a Resource Through its Lifetime CWE-682 · Incorrect Calculation CWE-787 · Out-of-bounds Write CWE-788 · Access of Memory Past End of Buffer

Google Project Zero

Patched

March 11, 2025

Reported by

Anonymous

Root Cause Analysis

???

Exploits & PoC

airbus-cert/cve-2025-24985

Detection of malicious VHD files for CVE-2025-24985

2 2025-04-02

1 repo — triés par ⭐ Rechercher sur GitHub ↗

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24985

vendor-advisory patch

Signal Intelligence

Confidenceⓘ

92%

EPSS 2.23%

CVSS v3.1 7.8

Mentions 5

Last Seen Mar 12, 2025

CNA Information

CNA Assigner

microsoft

CNA Title

Windows Fast FAT File System Driver Remote Code Execution Vulnerability

Analyst Note

This CVE is confirmed as a zero-day with active exploitation since 2023, documented by Google Project Zero, and formally patched by Microsoft in March 2025. The high CVSS score (7.8), local code execution capability, and coverage by reputable security sources (BleepingComputer) substantiate the confirmed status.