CVE-2025-24984: Microsoft Windows NTFS Information Disclosure Vulnerability
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
Other sources
Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file vulnerability that allows an unauthorized attacker to disclose information with a physical attack. An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.
— CISA
Windows NTFS Information Disclosure Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.7876Patch KB5053594 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.22470Patch KB5053887 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.25368Patch KB5053886 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.10240.20947Patch KB5053618 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.3476Fixed in 10.0.26100.3403Patch KB5053636 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.5039Patch KB5053602 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.25398.1486Patch KB5053599 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.5608Patch KB5053606 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22621.5039Patch KB5053602 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.5608Patch KB5053606 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.3328Fixed in 10.0.20348.3270Patch KB5053638 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.7009Patch KB5053596 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.3328Patch KB5053638 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.3270Patch KB5053638 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.3476Patch KB5053636 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.3403Patch KB5053636 - Compensating control
Follow applicable BOD 22-01 guidance for cloud services.
- Compensating control
Discontinue use of the affected product if mitigations are unavailable.
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-24984?
CVE-2025-24984 is classified as a high severity vulnerability due to its potential for sensitive information disclosure.
How do I fix CVE-2025-24984?
To remediate CVE-2025-24984, apply the latest security patch provided by Microsoft for the affected Windows versions.
Which versions of Windows are affected by CVE-2025-24984?
CVE-2025-24984 affects multiple versions of Windows including Windows 10, Windows 11, and various Windows Server editions.
What type of attack does CVE-2025-24984 allow?
CVE-2025-24984 allows unauthorized attackers to disclose sensitive information through physical access to systems.
Can the CVE-2025-24984 vulnerability be exploited remotely?
No, CVE-2025-24984 requires physical access to the affected machine to exploit the vulnerability.