CVE-2025-24048
Published: 11 March 2025
Summary
CVE-2025-24048 is a high-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Microsoft Windows 11 24H2. Its CVSS base score is 7.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 35.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-16 (Memory Protection) and SI-2 (Flaw Remediation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly mandates identification, reporting, and remediation of the heap-based buffer overflow flaw in Windows Hyper-V via patching.
Implements memory protection mechanisms like ASLR and DEP that directly mitigate heap-based buffer overflow exploits in Hyper-V.
Enforces least privilege to restrict low-privileged local attackers' access to Hyper-V components, limiting privilege escalation opportunities.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Heap-based buffer overflow in Hyper-V enables local privilege escalation via vulnerability exploitation.
NVD Description
Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Deeper analysisAI
CVE-2025-24048 is a heap-based buffer overflow vulnerability in the Windows Hyper-V role, published on 2025-03-11T17:16:26.703. It carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and maps to CWE-122 (Heap-based Buffer Overflow) and CWE-125 (Out-of-bounds Read).
A local attacker with low privileges (PR:L) can exploit this vulnerability with low attack complexity and no user interaction required. Successful exploitation allows privilege escalation, enabling high impacts on confidentiality, integrity, and availability.
Mitigation details are available in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24048.
Details
- CWE(s)