11 March 2025

10 results · Clear filters · Feed

• Critical 10.0
  CVE-2025-24201 Exploited Public exploit

  An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Alpine
  Mar 11, 2025

  KEV Mar 13, 2025
• High 7.0
  CVE-2025-26633 Exploited · Ransomware Public exploit EPSS 30%

  Microsoft Management Console Security Feature Bypass Vulnerability

  Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Mar 11, 2025

  KEV Mar 11, 2025
• High 7.8
  CVE-2025-24993 Exploited

  Windows NTFS Remote Code Execution Vulnerability

  Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Mar 11, 2025

  KEV Mar 11, 2025
• Medium 5.5
  CVE-2025-24991 Exploited

  Windows NTFS Information Disclosure Vulnerability

  Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Mar 11, 2025

  KEV Mar 11, 2025
• Medium 4.6
  CVE-2025-24984 Exploited

  Windows NTFS Information Disclosure Vulnerability

  Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Mar 11, 2025

  KEV Mar 11, 2025
• High 7.8
  CVE-2025-24985 Exploited Public exploit

  Windows Fast FAT File System Driver Remote Code Execution Vulnerability

  Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Mar 11, 2025

  KEV Mar 11, 2025
• High 7.0
  CVE-2025-24983 Exploited

  Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

  Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  Microsoft Windows Server 2016 Windows Server 2016 (Server Core installation) Windows 10 Version 1607 Windows
  Mar 11, 2025

  KEV Mar 11, 2025
• Medium 6.5
  CVE-2025-24054 Exploited Public exploit EPSS 62%

  NTLM Hash Disclosure Spoofing Vulnerability

  External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Mar 11, 2025

  KEV Apr 17, 2025
• Critical 10.0
  CVE-2024-54085 Exploited Public exploit EPSS 61%

  Redfish Authentication Bypass

  AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.

  AMI MegaRAC-SPx
  Mar 11, 2025

  KEV Jun 25, 2025
• High 8.1
  CVE-2025-27363 Exploited Public exploit EPSS 28%

  An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) whe…

  FreeType FreeType freetype freetype Debian Ubuntu Azure Linux Alpine
  Mar 11, 2025

  KEV May 6, 2025