NetSight
high7.8

CVE-2025-24066

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

Impact

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

Affected products

VendorProductAffected versions
MicrosoftWindows 10 1507
before 10.0.10240.20947
MicrosoftWindows 10 1607
before 10.0.14393.7876
MicrosoftWindows 10 21h2
before 10.0.19044.5608
MicrosoftWindows 10 22h2
before 10.0.19045.5608
MicrosoftWindows 11 22h2
before 10.0.22621.5039
MicrosoftWindows 11 23h2
before 10.0.22631.5039
MicrosoftWindows 11 24h2
before 10.0.26100.3403
after 10.0.26100.3403 before 10.0.26100.3476
MicrosoftWindows Server 2016
before 10.0.14393.7876
MicrosoftWindows Server 2022 23h2
before 10.0.25398.1486
MicrosoftWindows Server 2025
before 10.0.26100.3403
after 10.0.26100.3403 before 10.0.26100.3476

Weakness classification

References