CVE-2025-24997

CVSS v3 4.4 MEDIUM

4.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

N

ull pointer dereference in Windows Kernel Memory allows an authorized attacker to deny service locally.

References

Link	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24997	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_10_21h2::::::::
	cpe:2.3:o:microsoft:windows_10_22h2::::::::
	cpe:2.3:o:microsoft:windows_11_22h2::::::::
	cpe:2.3:o:microsoft:windows_11_23h2::::::::
	cpe:2.3:o:microsoft:windows_11_24h2::::::::
	cpe:2.3:o:microsoft:windows_server_2022::::::::
	cpe:2.3:o:microsoft:windows_server_2022_23h2::::::::
	cpe:2.3:o:microsoft:windows_server_2025::::::::

History

03 Jul 2025, 15:09

Type	Values Removed	Values Added
First Time		Microsoft windows Server 2025 Microsoft windows 11 24h2 Microsoft windows Server 2022 Microsoft windows 10 22h2 Microsoft windows 11 22h2 Microsoft windows 10 21h2 Microsoft Microsoft windows Server 2022 23h2 Microsoft windows 11 23h2
CPE		cpe:2.3:o:microsoft:windows_server_2022_23h2:::::::: cpe:2.3:o:microsoft:windows_11_22h2:::::::: cpe:2.3:o:microsoft:windows_11_24h2:::::::: cpe:2.3:o:microsoft:windows_10_21h2:::::::: cpe:2.3:o:microsoft:windows_11_23h2:::::::: cpe:2.3:o:microsoft:windows_server_2022:::::::: cpe:2.3:o:microsoft:windows_10_22h2:::::::: cpe:2.3:o:microsoft:windows_server_2025::::::::
References	~~() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24997 -~~	() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24997 - Vendor Advisory

11 Mar 2025, 17:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-03-11 17:16

Updated : 2025-07-03 15:09

NVD link : CVE-2025-24997

Mitre link : CVE-2025-24997

CVE.ORG link : CVE-2025-24997

JSON object : View

Products Affected

CWE

CWE-476

NULL Pointer Dereference

{"id": "CVE-2025-24997", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 0.8}]}, "published": "2025-03-11T17:16:37.103", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24997", "tags": ["Vendor Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-476"}]}], "descriptions": [{"lang": "en", "value": "Null pointer dereference in Windows Kernel Memory allows an authorized attacker to deny service locally."}, {"lang": "es", "value": "La desreferencia de puntero nulo en la memoria del kernel de Windows permite que un atacante autorizado deniegue el servicio localmente."}], "lastModified": "2025-07-03T15:09:25.927", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83256070-991F-404C-AE4C-CBB46166CA67", "versionEndExcluding": "10.0.19044.5608"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1F779E2-8536-4B06-A151-6115C9D88D29", "versionEndExcluding": "10.0.19045.5608"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B27CE48-66A0-488B-A7B6-18A5A191AFDA", "versionEndExcluding": "10.0.22621.5039"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77DC7D9D-F85F-41B4-A944-D27B388A1157", "versionEndExcluding": "10.0.22631.5039"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84168D48-1F68-4590-98BB-E926339D1A01", "versionEndExcluding": "10.0.26100.3403"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AAACC9C4-DDC5-4059-AFE3-A49DB2347A86", "versionEndExcluding": "10.0.20348.3270"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF423F8C-2E8A-46AB-BB2D-C416BF341F92", "versionEndExcluding": "10.0.25398.1486"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF81B44C-8FF7-4C61-9974-3F98DA9D492C", "versionEndExcluding": "10.0.26100.3403"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}