Linked CVE review

Deploy Microsoft Windows security update KB5053638

Linked CVEs: 33
Confirmed exploited: 6
PoC or lab evidence: 4
Maximum CVSS: 8.8

Evidence is kept separate

Confirmed exploitation, public exploit material, EPSS probability and CVSS severity answer different questions. “No confirmation recorded” means the checked sources do not currently confirm exploitation. It is not proof that exploitation has not occurred.

33 of 33 linked CVEs shown

Confirmed exploitedCVSS above 9.0

CVE and description	Severity	Exploit reality	Forecast and access	Remediation
CVE-2025-24054 Immediate evidence Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network.	6.5 · CVSS 3.1 · MediumSource: CNA	Confirmed in the wildCISA added this CVE to its Known Exploited Vulnerabilities catalogue on 2025-04-17.Public exploit referencedA structured CVE source labels at least one public reference as exploit material. BlackTree has not independently validated that it is safe, reliable or weaponised.	EPSS: 58.9% · 99.1th percentileForecast date: 2026-10-08NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction	Patch nowCISA confirms exploitation in the wild and lists 2025-05-08 as the remediation due date.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-26633 Immediate evidence Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.	7.0 · CVSS 3.1 · HighSource: CNA	Confirmed in the wildCISA added this CVE to its Known Exploited Vulnerabilities catalogue on 2025-03-11. Known ransomware campaign use is recorded.Public exploit referencedA structured CVE source labels at least one public reference as exploit material. BlackTree has not independently validated that it is safe, reliable or weaponised.	EPSS: 30.4% · 98.2th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · NONE privileges · REQUIRED user interaction	Patch nowCISA confirms exploitation in the wild and lists 2025-04-01 as the remediation due date.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24985 Immediate evidence Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows an unauthorized attacker to execute code locally.	7.8 · CVSS 3.1 · HighSource: CNA	Confirmed in the wildCISA added this CVE to its Known Exploited Vulnerabilities catalogue on 2025-03-11.Public exploit referencedA structured CVE source labels at least one public reference as exploit material. BlackTree has not independently validated that it is safe, reliable or weaponised.	EPSS: 3.92% · 90.1th percentileForecast date: 2026-10-08LOCAL · LOW complexity · NONE privileges · REQUIRED user interaction	Patch nowCISA confirms exploitation in the wild and lists 2025-04-01 as the remediation due date.Patch available. An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
CVE-2025-24993 Immediate evidence Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability Microsoft Windows New Technology File System (NTFS) contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.	7.8 · CVSS 3.1 · HighSource: CNA	Confirmed in the wildCISA added this CVE to its Known Exploited Vulnerabilities catalogue on 2025-03-11.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 2.22% · 82.1th percentileForecast date: 2026-10-08LOCAL · LOW complexity · NONE privileges · REQUIRED user interaction	Patch nowCISA confirms exploitation in the wild and lists 2025-04-01 as the remediation due date.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24991 Immediate evidence Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability Microsoft Windows New Technology File System (NTFS) contains an out-of-bounds read vulnerability that allows an authorized attacker to disclose information locally.	5.5 · CVSS 3.1 · MediumSource: CNA	Confirmed in the wildCISA added this CVE to its Known Exploited Vulnerabilities catalogue on 2025-03-11.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 2.02% · 80.3th percentileForecast date: 2026-10-08LOCAL · LOW complexity · NONE privileges · REQUIRED user interaction	Patch nowCISA confirms exploitation in the wild and lists 2025-04-01 as the remediation due date.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24984 Immediate evidence Microsoft Windows NTFS Information Disclosure Vulnerability Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file vulnerability that allows an unauthorized attacker to disclose information with a physical attack. An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.	4.6 · CVSS 3.1 · MediumSource: CNA	Confirmed in the wildCISA added this CVE to its Known Exploited Vulnerabilities catalogue on 2025-03-11.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.99% · 80.1th percentileForecast date: 2026-10-08PHYSICAL · LOW complexity · NONE privileges · NONE user interaction	Patch nowCISA confirms exploitation in the wild and lists 2025-04-01 as the remediation due date.Patch available. An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
CVE-2025-24071 PoC or lab evidence Microsoft Windows File Explorer Spoofing Vulnerability Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.	6.5 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.Public exploit referencedA structured CVE source labels at least one public reference as exploit material. BlackTree has not independently validated that it is safe, reliable or weaponised.	EPSS: 23.3% · 97.7th percentileForecast date: 2026-10-08NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction	Within 7 daysMedium technical severity with public exploit material referenced by a structured source; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-26645 Scheduled assessment Remote Desktop Client Remote Code Execution Vulnerability Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.	8.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 3.18% · 87.7th percentileForecast date: 2026-10-08NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24035 Scheduled assessment Windows Remote Desktop Services Remote Code Execution Vulnerability Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.	8.1 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.72% · 76.8th percentileForecast date: 2026-10-08NETWORK · HIGH complexity · NONE privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24056 Scheduled assessment Windows Telephony Service Remote Code Execution Vulnerability Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network.	8.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.57% · 74.7th percentileForecast date: 2026-10-08NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24051 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.	8.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.49% · 73.3th percentileForecast date: 2026-10-08NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24045 Scheduled assessment Windows Remote Desktop Services Remote Code Execution Vulnerability Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.	8.1 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.33% · 70.3th percentileForecast date: 2026-10-08NETWORK · HIGH complexity · NONE privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24064 Scheduled assessment Windows Domain Name Service Remote Code Execution Vulnerability Use after free in DNS Server allows an unauthorized attacker to execute code over a network.	8.1 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.29% · 69.3th percentileForecast date: 2026-10-08NETWORK · HIGH complexity · NONE privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24061 Scheduled assessment Windows Mark of the Web Security Feature Bypass Vulnerability Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.21% · 67.4th percentileForecast date: 2026-10-08LOCAL · LOW complexity · NONE privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-21180 Scheduled assessment Windows exFAT File System Remote Code Execution Vulnerability Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.95% · 60.0th percentileForecast date: 2026-10-08LOCAL · LOW complexity · NONE privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24066 Scheduled assessment Kernel Streaming Service Driver Elevation of Privilege Vulnerability Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.71% · 52.1th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24067 Scheduled assessment Kernel Streaming Service Driver Elevation of Privilege Vulnerability Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.71% · 52.1th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24084 Scheduled assessment Windows Subsystem for Linux (WSL2) Kernel Remote Code Execution Vulnerability Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally.	8.4 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.70% · 51.6th percentileForecast date: 2026-10-08LOCAL · LOW complexity · NONE privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-25008 Scheduled assessment Windows Server Elevation of Privilege Vulnerability Improper link resolution before file access ('link following') in Microsoft Windows allows an authorized attacker to elevate privileges locally.	7.1 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.61% · 47.7th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24044 Scheduled assessment Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.60% · 46.8th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24995 Scheduled assessment Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.58% · 46.2th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24046 Scheduled assessment Kernel Streaming Service Driver Elevation of Privilege Vulnerability Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.54% · 43.9th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24048 Scheduled assessment Windows Hyper-V Elevation of Privilege Vulnerability Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.54% · 43.9th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24050 Scheduled assessment Windows Hyper-V Elevation of Privilege Vulnerability Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.54% · 43.9th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24059 Scheduled assessment Windows Common Log File System Driver Elevation of Privilege Vulnerability Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.54% · 43.9th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24072 Scheduled assessment Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.54% · 43.9th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-21247 Scheduled assessment MapUrlToZone Security Feature Bypass Vulnerability Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.	4.3 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 3.05% · 87.2th percentileForecast date: 2026-10-08NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24996 Scheduled assessment NTLM Hash Disclosure Spoofing Vulnerability External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.	6.5 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.34% · 70.5th percentileForecast date: 2026-10-08NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24992 Scheduled assessment Windows NTFS Information Disclosure Vulnerability Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally.	5.5 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.07% · 63.8th percentileForecast date: 2026-10-08LOCAL · LOW complexity · NONE privileges · REQUIRED user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24055 Scheduled assessment Windows USB Video Class System Driver Information Disclosure Vulnerability Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack.	4.3 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.87% · 57.6th percentileForecast date: 2026-10-08PHYSICAL · LOW complexity · LOW privileges · NONE user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24987 Scheduled assessment Windows USB Video Class System Driver Elevation of Privilege Vulnerability Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.	6.6 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.68% · 51.0th percentileForecast date: 2026-10-08PHYSICAL · LOW complexity · LOW privileges · NONE user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24988 Scheduled assessment Windows USB Video Class System Driver Elevation of Privilege Vulnerability Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.	6.6 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.68% · 51.0th percentileForecast date: 2026-10-08PHYSICAL · LOW complexity · LOW privileges · NONE user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24997 Scheduled assessment DirectX Graphics Kernel File Denial of Service Vulnerability Null pointer dereference in Windows Kernel Memory allows an authorized attacker to deny service locally.	4.4 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.60% · 47.3th percentileForecast date: 2026-10-08LOCAL · LOW complexity · HIGH privileges · NONE user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.