CVE-2025-24985: Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
Other sources
Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows an unauthorized attacker to execute code locally.
— CISA
Windows Fast FAT File System Driver Remote Code Execution Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.22470Patch KB5053887 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.1.7601.27618Patch KB5053627 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.25368Patch KB5053886 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.0.6003.23168Patch KB5053995 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.7876Patch KB5053594 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.10240.20947Patch KB5053618 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.5039Patch KB5053602 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.3476Fixed in 10.0.26100.3403Patch KB5053636 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.25398.1486Patch KB5053599 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.5608Patch KB5053606 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22621.5039Patch KB5053602 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.5608Patch KB5053606 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.3328Fixed in 10.0.20348.3270Patch KB5053638 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.7009Patch KB5053596 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.3328Patch KB5053638 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.3270Patch KB5053638 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.3476Patch KB5053636 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.3403Patch KB5053636
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-24985?
CVE-2025-24985 is classified as an important vulnerability due to the potential for unauthorized code execution.
How do I fix CVE-2025-24985?
To fix CVE-2025-24985, apply the relevant security updates and patches provided by Microsoft for affected Windows versions.
What systems are affected by CVE-2025-24985?
CVE-2025-24985 affects various versions of Microsoft Windows including Windows 10, Windows 11, and Windows Server versions.
What type of vulnerability is CVE-2025-24985?
CVE-2025-24985 is an integer overflow or wraparound vulnerability that can lead to local code execution.
Can CVE-2025-24985 be exploited remotely?
CVE-2025-24985 cannot be exploited remotely; it requires local access to the system.