First published: Tue Mar 11 2025(Updated: )
<p>Null pointer dereference in Windows Kernel Memory allows an authorized attacker to deny service locally.</p>
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Windows 11 | =22H2 | |
Windows 11 | =24H2 | |
Microsoft Windows Server 2025 | ||
Microsoft Windows Server 2025 | ||
Windows 11 | =23H2 | |
Windows 11 | =23H2 | |
Windows 11 | =24H2 | |
Microsoft Windows Server 2022 23H2 | ||
Windows 11 | =22H2 | |
Microsoft Windows Server 2022 | ||
Microsoft Windows Server 2022 | ||
Windows 10 | =22H2 | |
Windows 10 | =22H2 | |
Windows 10 | =22H2 | |
Windows 10 | =21H2 | |
Windows 10 | =21H2 | |
Windows 10 | =21H2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2025-24997 has a severity rating that indicates it allows an authorized attacker to cause a denial of service locally.
To fix CVE-2025-24997, apply the appropriate security patches for your version of Windows as recommended by Microsoft.
CVE-2025-24997 affects various versions of Windows, including Windows 10, Windows 11, and Windows Server 2022.
No, CVE-2025-24997 requires local access to the system for exploitation.
CVE-2025-24997 is classified as a null pointer dereference denial of service vulnerability in Windows Kernel Memory.