Microsoft: >> Windows Server 2022 23h2 Security Vulnerabilities
CVE-2025-24985
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
Known exploited
CVSS Score
7.8
EPSS Score
0.015
Published
2025-03-11
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
CVSS Score
6.6
EPSS Score
0.001
Published
2025-03-11
Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally.
CVSS Score
8.4
EPSS Score
0.003
Published
2025-03-11
Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.001
Published
2025-03-11
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
CVSS Score
7.3
EPSS Score
0.016
Published
2025-03-11
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
CVSS Score
8.1
EPSS Score
0.005
Published
2025-03-11
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.001
Published
2025-03-11
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.001
Published
2025-03-11
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
CVSS Score
6.5
EPSS Score
0.513
Published
2025-03-11
Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network.
CVSS Score
8.8
EPSS Score
0.003
Published
2025-03-11