High · 7.5 Exploitation more likely CVE-2025-29971 EUVD-2025-14466GHSA-57q8-vxgg-mfqw

Web Threat Defense (WTD.sys) Denial of Service Vulnerability

Published May 13, 2025 · Updated Feb 13, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Windows 11 version 22H2 Product: Windows 11 version 22H3 Product: Windows 11 version 23H2 Product: Windows 11 Version 24H2 Platform: Windows

Description

Out-of-bounds read in Web Threat Defense (WTD.sys) allows an unauthorized attacker to deny service over a network.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Windows 11 version 22H2	10.0.22621.0 – < 10.0.22621.5335	10.0.22621.5335
Microsoft	Windows 11 version 22H3	10.0.22631.0 – < 10.0.22631.5335	10.0.22631.5335
Microsoft	Windows 11 Version 23H2	10.0.22631.0 – < 10.0.22631.5335	10.0.22631.5335
Microsoft	Windows 11 Version 24H2	10.0.26100.0 – < 10.0.26100.4061	10.0.26100.4061

Advisories 3

WID-SEC-2025-1050 Microsoft Windows Server: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Mar 15, 2026
MSRC-CVE-2025-29971 Web Threat Defense (WTD.sys) Denial of Service Vulnerability Microsoft Security Response Center · May 16, 2025
NCSC-2025-0159 Kwetsbaarheden verholpen in Microsoft Windows NCSC-NL (Netherlands) · May 13, 2025

References

Web Threat Defense (WTD.sys) Denial of Service Vulnerability vendor-advisory patch