Heap-based Buffer Overflow in Kernel Streaming Driver by Microsoft
CVE-2025-24995
7.8HIGH
Key Information:
- Vendor
- Microsoft
- Status
- Vendor
- CVE Published:
- 11 March 2025
Summary
A heap-based buffer overflow vulnerability exists in the Kernel Streaming WOW Thunk Service Driver, which can be exploited by an authorized attacker to achieve local privilege escalation. This issue underscores the importance of applying security updates and maintaining secure configurations to prevent the exploitation of such vulnerabilities in Windows operating systems.
Affected Version(s)
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.20947
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.7876
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.7009
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved