CVE-2025-24985

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero

Triaged: March 3, 2026 5 articles

VulnLookup ↗ NVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

2.23%

probability

This CVE has a 2.23% probability of being exploited in the next 30 days.

0% Top 84.7th percentile of all CVEs 100%

CVSS score unavailable

Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Description

Project Zero

Windows Fast FAT File System Driver Remote Code Execution Vulnerability

Attack Intelligence

CWE-118 · Incorrect Access of Indexable Resource ('Range Error') CWE-119 · Buffer Overflow CWE-122 · Heap-based Buffer Overflow CWE-190 · Integer Overflow CWE-664 · Improper Control of a Resource Through its Lifetime CWE-682 · Incorrect Calculation CWE-787 · Out-of-bounds Write CWE-788 · Access of Memory Past End of Buffer

Google Project Zero

Patched

March 11, 2025

Reported by

Anonymous

Root Cause Analysis

???

URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero-Days

TheHackerNews

Microsoft and Adobe Patch Tuesday, March 2025 Security Update Review

Qualys Mar 11, 2025

Microsoft patches Windows Kernel zero-day exploited since 2023

BleepingComputer Mar 12, 2025

Microsoft March 2025 Patch Tuesday fixes 7 zero-days, 57 flaws

BleepingComputer Mar 11, 2025

⚡ THN Weekly Recap: Router Hacks, PyPI Attacks, New Ransomware Decryptor, and More

TheHackerNews

Signal Intelligence

Confidenceⓘ

92%

EPSS 2.23%

Mentions 5

Last Seen Mar 12, 2025

CNA Information

Analyst Note

This CVE is confirmed as a zero-day with active exploitation since 2023, documented by Google Project Zero, and formally patched by Microsoft in March 2025. The high CVSS score (7.8), local code execution capability, and coverage by reputable security sources (BleepingComputer) substantiate the confirmed status.