Actively exploited in the wild
Microsoft Windows Win32k Use-After-Free Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2025-03-11. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2025-24983
HighCVSS 7.0KEVSummary
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could gain higher privileges on the system, potentially leading to full host compromise.
Recommendation
Apply the latest Windows security updates that address this vulnerability.
Other vulnerabilities in Windows Win32 Kernel Subsystem
See all- CVE-2022-41113High
Vulnerability in the Windows Win32 Kernel Subsystem allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
- CVE-2026-70290Medium
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-70289High
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2024-38253High
An elevation of privilege vulnerability in the Windows Win32 Kernel Subsystem.
- CVE-2024-38252High
An elevation of privilege vulnerability in the Windows Win32 Kernel Subsystem.
- CVE-2024-30086High
A vulnerability in the Windows Win32 kernel subsystem allows elevation of privilege. This flaw can be exploited by a local attacker to gain higher privileges on the system.
Original NVD description (English source)
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.