CVE-2025-24983

Published Mar 11, 2025

Last updated a month ago

Windows

Win32k

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2025-24983 is an elevation of privilege vulnerability found in the Windows Win32k driver. Exploitation of this use-after-free vulnerability allows an attacker to elevate their privileges locally on a system. This vulnerability affects older versions of Windows, specifically Windows 8.1 and Windows Server 2012 R2. Newer operating systems like Windows 10, Windows 11, and Windows Server 2019 and later appear to be unaffected. This vulnerability has been observed being exploited in the wild in conjunction with the PipeMagic backdoor, a malware known for data exfiltration and providing remote access capabilities. Attackers must already have local access to the system to exploit CVE-2025-24983, but successful exploitation allows them to gain SYSTEM privileges. Microsoft patched this vulnerability as part of their March 2025 Patch Tuesday release.

Description: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Source: secure@microsoft.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 7
Impact score: 5.9
Exploitability score: 1
Vector string: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: Microsoft Windows Win32k Use-After-Free Vulnerability
Exploit added on: Mar 11, 2025
Exploit action due: Apr 1, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

secure@microsoft.com: CWE-416

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "6997DE6E-CBAD-4690-A68C-8F10E477DCC2",
            "versionEndExcluding": "10.0.10240.20947"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "3CBCF6D9-5085-473C-82F5-98BC246A9C4C",
            "versionEndExcluding": "10.0.10240.20947"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "0CF0E174-4692-4AA3-B72E-12E73A1BDBE5",
            "versionEndExcluding": "10.0.14393.7876"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "340EF5F8-D4F5-4AD8-9D80-1DEC2F376BE5",
            "versionEndExcluding": "10.0.14393.7876"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C7610CDB-A02B-4C62-B17F-6DCE2B3DE4F0",
            "versionEndExcluding": "10.0.14393.7876"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]