{"metadata": {"vulnerability": "cve-2025-24991", "count": 69, "kinds": {"milestone": 8, "sighting": 24, "kev": 11, "other": 26}}, "data": [{"timestamp": "2025-01-30T15:14:20.992Z", "date_only": false, "value": "2025-01-30T15:14:20.992Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-24991", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-25T15:15:00Z", "date_only": false, "value": "2025-02-25T15:15:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0078", "record": "NCSC-2025-0078", "field": "document.tracking.generator.date"}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-24991", "field": "timestamps.asserted_at", "uuid": "55ef1bb8-3846-473d-b1e1-e28a981f5fcc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-24991", "field": "timestamps.asserted_at", "uuid": "c3eeea76-290f-43e2-bbc2-291b85623313", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": true, "value": "2025-03-11", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-24991", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-24991", "field": "evidence.0.details.added_date", "uuid": "c3eeea76-290f-43e2-bbc2-291b85623313", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": true, "value": "2025-03-11", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-24991", "field": "evidence.0.details.date_added", "uuid": "55ef1bb8-3846-473d-b1e1-e28a981f5fcc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-24991", "field": "timestamps.first_seen_at", "uuid": "55ef1bb8-3846-473d-b1e1-e28a981f5fcc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-24991", "field": "timestamps.first_seen_at", "uuid": "c3eeea76-290f-43e2-bbc2-291b85623313", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": true, "value": "2025-03-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0193", "record": "CERTFR-2025-AVI-0193", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-24991", "field": "status.status_updated_at", "uuid": "55ef1bb8-3846-473d-b1e1-e28a981f5fcc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-24991", "field": "status.status_updated_at", "uuid": "c3eeea76-290f-43e2-bbc2-291b85623313", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-24991", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2025-03-11T07:00:00Z", "date_only": false, "value": "2025-03-11T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-24991", "record": "MSRC_CVE-2025-24991", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-03-11T07:00:00Z", "date_only": false, "value": "2025-03-11T07:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-24991", "record": "MSRC_CVE-2025-24991", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-03-11T07:00:00Z", "date_only": false, "value": "2025-03-11T07:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "cve-2025-24991", "field": "containers.cna.datePublic"}, {"timestamp": "2025-03-11T07:00:00Z", "date_only": false, "value": "2025-03-11T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-24991", "record": "MSRC_CVE-2025-24991", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-03-11T07:00:00Z", "date_only": false, "value": "2025-03-11T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-24991", "record": "MSRC_CVE-2025-24991", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-03-11T16:39:36Z", "date_only": false, "value": "2025-03-11T16:39:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "0c7456f9-7ae8-49e5-bcd5-85ab63dff767", "url": "https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review"}, {"timestamp": "2025-03-11T16:59:19.319Z", "date_only": false, "value": "2025-03-11T16:59:19.319Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-24991", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-03-11T17:09:47.250Z", "date_only": false, "value": "2025-03-11T17:09:47.250926Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114144902283889820", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "260e7111-d016-4877-b1f3-c427907a4a34", "url": "https://infosec.exchange/users/cR0w/statuses/114144902283889820"}, {"timestamp": "2025-03-11T17:16:35Z", "date_only": false, "value": "2025-03-11T17:16:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HG9J-PWRG-H4QQ", "record": "GHSA-HG9J-PWRG-H4QQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-03-11T17:16:35.297Z", "date_only": false, "value": "2025-03-11T17:16:35.297", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24991", "record": "FKIE_CVE-2025-24991", "field": "published"}, {"timestamp": "2025-03-11T17:39:50Z", "date_only": false, "value": "2025-03-11T17:39:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7188", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "3b85f9fd-e8a6-442a-a715-84b46cd88537", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-24991\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C)\n\ud83d\udd39 Description: Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.\n\ud83d\udccf Published: 2025-03-11T16:59:19.319Z\n\ud83d\udccf Modified: 2025-03-11T17:27:58.822Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24991", "url": "https://t.me/DarkWebInformer_CVEAlerts/7188"}, {"timestamp": "2025-03-11T18:10:04Z", "date_only": false, "value": "2025-03-11T18:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "1469c703-4bc4-49b5-ad4e-02a2d105165c"}, {"timestamp": "2025-03-11T18:32:18Z", "date_only": false, "value": "2025-03-11T18:32:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HG9J-PWRG-H4QQ", "record": "GHSA-HG9J-PWRG-H4QQ", "field": "published"}, {"timestamp": "2025-03-11T18:43:14.505Z", "date_only": false, "value": "2025-03-11T18:43:14.505624Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0078", "record": "NCSC-2025-0078", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-03-11T18:43:14.505Z", "date_only": false, "value": "2025-03-11T18:43:14.505624Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0078", "record": "NCSC-2025-0078", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-03-11T18:43:14.505Z", "date_only": false, "value": "2025-03-11T18:43:14.505624Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0078", "record": "NCSC-2025-0078", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-03-11T20:06:20.397Z", "date_only": false, "value": "2025-03-11T20:06:20.397023Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk4ujl7q2i2e", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "b7cfc8af-99a2-4138-bc9c-792511091d77", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk4ujl7q2i2e"}, {"timestamp": "2025-03-11T20:08:15.647Z", "date_only": false, "value": "2025-03-11T20:08:15.647828Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3543147", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "f70f1f32-af55-41da-ba8a-b35d34e928ae", "url": "https://feedsin.space/feed/CISAKevBot/items/3543147"}, {"timestamp": "2025-03-11T20:08:40Z", "date_only": false, "value": "2025-03-11T20:08:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/20122", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "b559358e-0708-4f8e-8e50-f866ae1078a8", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-24991 - Microsoft Windows NTFS Out-of-bounds Read\", \n  \"Content\": \"CVE ID : CVE-2025-24991 \nPublished : March 11, 2025, 5:16 p.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/20122"}, {"timestamp": "2025-03-11T22:47:45Z", "date_only": false, "value": "2025-03-11T22:47:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/03/11/microsoft-security-advisory-march-monthly.html", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "7055b659-781e-427e-a6be-4bf81d0ec10f", "url": "https://threatintel.cc/2025/03/11/microsoft-security-advisory-march-monthly.html"}, {"timestamp": "2025-03-11T22:53:01Z", "date_only": false, "value": "2025-03-11T22:53:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://krebsonsecurity.com/2025/03/microsoft-6-zero-days-in-march-2025-patch-tuesday/", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "f8a788a4-e6cd-4cfd-8f13-06906dcc1e28", "url": "https://krebsonsecurity.com/2025/03/microsoft-6-zero-days-in-march-2025-patch-tuesday/"}, {"timestamp": "2025-03-11T23:00:00Z", "date_only": false, "value": "2025-03-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0537", "record": "WID-SEC-W-2025-0537", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-03-11T23:00:00Z", "date_only": false, "value": "2025-03-11T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0537", "record": "WID-SEC-W-2025-0537", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-03-11T23:00:00Z", "date_only": false, "value": "2025-03-11T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0537", "record": "WID-SEC-W-2025-0537", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-03-12T00:00:00Z", "date_only": false, "value": "2025-03-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0193", "record": "CERTFR-2025-AVI-0193", "field": "revisions.0.revision_date"}, {"timestamp": "2025-03-12T04:00:00Z", "date_only": false, "value": "2025-03-12T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1500", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "7a33b4a2-931f-4aac-a807-4e86797f904d", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1500"}, {"timestamp": "2025-03-12T04:42:52.190Z", "date_only": false, "value": "2025-03-12T04:42:52.190926Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lk5rfbjyr22i", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "9e7b9cb7-9ccb-4863-ad44-4969f69d1c4e", "url": "https://bsky.app/profile/shiojiri.com/post/3lk5rfbjyr22i"}, {"timestamp": "2025-03-12T09:39:02.515Z", "date_only": false, "value": "2025-03-12T09:39:02.515679Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-a8b1f1f7-7544db6064fedc76", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "bdde5ff3-3ab5-4826-bbf9-68fdaabbf7e4", "url": "https://poliverso.org/objects/0477a01e-a8b1f1f7-7544db6064fedc76"}, {"timestamp": "2025-03-12T11:08:25Z", "date_only": false, "value": "2025-03-12T11:08:25.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/b5c68f42-3bb2-4cd1-8259-912ca597ba10", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "10fb6e7f-732c-409e-84ba-35fe767d8f41"}, {"timestamp": "2025-03-12T14:37:57.472Z", "date_only": false, "value": "2025-03-12T14:37:57.472294Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lk6sneqoei2j", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "f60b70a1-f059-4ba9-9fb6-36bd30327b3a", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3lk6sneqoei2j"}, {"timestamp": "2025-03-12T14:55:14Z", "date_only": false, "value": "2025-03-12T14:55:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsec_news/5470", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "11038814-3166-4e5c-870e-e3f1ce444c73", "content": "\u200b\u26a1\ufe0fUSB-\u0448\u043f\u0438\u043e\u043d \u0438 7 Zero Day: \u043a\u0430\u043a \u043f\u0440\u043e\u0448\u0435\u043b \u043c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u0438\u0439 Patch Tuesday \u0443 Microsoft\n\n\ud83d\udcac Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Patch Tuesday 2025, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432 57 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 6 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043d\u0443\u043b\u0435\u0432\u044b\u0445 \u0434\u043d\u0435\u0439. \u0421\u0440\u0435\u0434\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u2014 6 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u043a\u0440\u044b\u043b\u0430:\n23 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (Elevation of Privilege, EoP);\n3 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (Security Feature Bypass);\n23 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (Remote Code Execution, RCE);\n4 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (Information Disclosure);\n1 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0438\u043f\u0430 \u00ab\u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb (Denial of Service, DoS);\n3 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u0430 (Spoofing).\n\n\u0412 \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u0435 \u0432\u043e\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Mariner \u0438 10 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u043d\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Microsoft Edge.\n\n\u0427\u0442\u043e\u0431\u044b \u0443\u0437\u043d\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u043e \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445, \u043d\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e, \u0441\u0442\u043e\u0438\u0442 \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 Windows 11 KB5053598 \u0438 KB5053602 , \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c Windows 10 KB5053606 .\n\n\u0428\u0435\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\nMicrosoft \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 6 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 1 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u0434\u043e\u0432\u0435\u0434\u044f \u043e\u0431\u0449\u0435\u0435 \u0447\u0438\u0441\u043b\u043e \u043d\u0443\u043b\u0435\u0432\u044b\u0445 \u0434\u043d\u0435\u0439 \u0434\u043e 7. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 NTFS \u0438 \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c VHD-\u0434\u0438\u0441\u043a\u043e\u0432.\n\nCVE-2025-24983 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u044f\u0434\u0440\u0430 Windows Win32, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 SYSTEM \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u0431\u0435\u0434\u044b \u0432 \u0433\u043e\u043d\u043a\u0435 race condition. Microsoft \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0434\u0435\u0442\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\n\nCVE-2025-24984 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 Windows NTFS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0441 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0443\u0442\u0451\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e USB-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\n\nCVE-2025-24985 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows Fast FAT, \u0434\u0435\u043b\u0430\u044e\u0449\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 integer overflow \u0438\u043b\u0438 wraparound. \u0410\u0442\u0430\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0443\u0442\u0451\u043c \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e VHD-\u0434\u0438\u0441\u043a\u0430. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e.\n\nCVE-2025-24991 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 Windows NTFS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 VHD-\u0444\u0430\u0439\u043b. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e.\n\nCVE-2025-24993 \u2014 \u043e\u0448\u0438\u0431\u043a\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 Windows NTFS. \u0414\u0430\u043d\u043d\u0430\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (heap-based buffer overflow) \u0432 Windows NTFS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434. \u0410\u0442\u0430\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0443\u0442\u0451\u043c \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e VHD-\u0434\u0438\u0441\u043a\u0430. \u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e.\n\nCVE-2025-26633 \u2014 \u043e\u0431\u0445\u043e\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (Microsoft Management Console). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b Windows, \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0436\u0435\u0440\u0442\u0432\u0443 \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 .msc-\u0444\u0430\u0439\u043b. \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043d\u0435\u0442. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 Trend Micro.\n\n\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f\nCVE-2025-26630 \u2014 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 Microsoft Access. \u0412\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 (use-after-free, UAF) \u0432 Microsoft Office Access. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0436\u0435\u0440\u0442\u0432\u0443 \u043d\u0443\u0436\u043d\u043e \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b Access. \u042d\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0438\u043b\u0438 \u0430\u0442\u0430\u043a \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438. \u041e\u0434\u043d\u0430\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u043d\u0435\u043b\u044c \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d Unpatched.ai.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/5470"}, {"timestamp": "2025-03-12T16:31:14Z", "date_only": false, "value": "2025-03-12T16:31:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/6833", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "a60ab702-e0f8-4c9f-9ddc-1020d391b448", "content": "Microsoft \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u043c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u0438\u0439 PatchTuesday \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 57 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 7 0-day, \u0448\u0435\u0441\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u0437\u0430\u043a\u0440\u044b\u0442\u043e \u0448\u0435\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0432\u0441\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 RCE, \u0430 \u043e\u0431\u0449\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: 23 - EoP, 3 - \u043e\u0431\u0445\u043e\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, 23 - RCE, 4 - \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 1 0 DoS \u0438 3 - \u0441\u043f\u0443\u0444\u0438\u043d\u0433.\n\n\u041a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u043d\u0443\u043b\u044f\u043c:\n\n- CVE-2025-24983: \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u044f\u0434\u0440\u0430 Windows Win32, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 SYSTEM \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\nMicrosoft \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u043d\u0435 \u0434\u0435\u043b\u0438\u0442\u0441\u044f \u0442\u0435\u043c, \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u0434\u043d\u0430\u043a\u043e, \u0432 \u0432\u0438\u0434\u0443 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 ESET, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0431\u0443\u0434\u0443\u0442 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.\n\n- CVE-2025-24984: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 Windows NTFS, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e USB-\u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044f.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043a\u0440\u0430\u0441\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e. \u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e, \u043a\u0430\u043a \u0438 \u0442\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435.\n\n- CVE-2025-24985: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows Fast FAT, \u0434\u0435\u043b\u0430\u044e\u0449\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c RCE.\n\n\u041e\u043d\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0438\u043b\u0438 \u043e\u0431\u0442\u0435\u043a\u0430\u043d\u0438\u0435\u043c \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Windows Fast FAT Driver.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u043f\u0443\u0442\u0435\u043c \u043e\u0431\u043c\u0430\u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e VHD, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0442\u0435\u043c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0442 Microsoft, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u0431\u0440\u0430\u0437\u044b VHD \u0440\u0430\u043d\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438\u0441\u044c \u0432 \u0445\u043e\u0434\u0435\u00a0\u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u00a0\u0438 \u0447\u0435\u0440\u0435\u0437\u00a0\u0441\u0430\u0439\u0442\u044b \u0441 \u043f\u0438\u0440\u0430\u0442\u0441\u043a\u0438\u043c \u041f\u041e. \n\n- CVE-2025-24991: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 Windows NTFS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 VHD-\u0444\u0430\u0439\u043b \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n- CVE-2025-24993: \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Windows NTFS \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 VHD.\n\n- CVE-2025-26633: \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Microsoft, \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Trend Micro.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u043d\u043e \u0441\u0443\u0434\u044f \u043f\u043e \u0435\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Windows \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434.\n\n\u041f\u0440\u0438 \u0430\u0442\u0430\u043a\u0435 \u0447\u0435\u0440\u0435\u0437 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u0443\u044e \u043f\u043e\u0447\u0442\u0443 \u0438\u043b\u0438 \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0446\u0435\u043b\u0435\u0432\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0412 \u043b\u044e\u0431\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043d\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u043a\u043e\u043d\u0442\u0435\u043d\u0442.\n\n\u0412\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u0438\u0434\u0435\u0442\u0441\u044f \u0443\u0431\u0435\u0434\u0438\u0442\u044c \u0436\u0435\u0440\u0442\u0432\u0443 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043d\u0430\u0436\u0430\u0442\u044c \u043d\u0430 \u0441\u0441\u044b\u043b\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442 \u0435\u0433\u043e \u043d\u0430 \u0441\u0430\u0439\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0438\u043b\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\n\u041a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u043e\u0439 0-day \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f CVE-2025-26630, RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 Microsoft Access. \u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 Unpatched.ai.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u0438\u043b\u0438 \u0441\u043e\u0446\u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0436\u0435\u0440\u0442\u0432\u0443 \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b Access.\n\n\u041f\u043e\u043b\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043a\u0430\u0436\u0434\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 - \u0437\u0434\u0435\u0441\u044c.", "url": "https://t.me/true_secator/6833"}, {"timestamp": "2025-03-12T23:00:00Z", "date_only": false, "value": "2025-03-12T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0537", "record": "WID-SEC-W-2025-0537", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-03-14T03:55:32.278Z", "date_only": false, "value": "2025-03-14T03:55:32.278934Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-24991", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-14T03:55:32.278Z", "date_only": false, "value": "2025-03-14T03:55:32.278934Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24991", "record": "FKIE_CVE-2025-24991", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-19T23:00:00Z", "date_only": false, "value": "2025-03-19T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0537", "record": "WID-SEC-W-2025-0537", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-03-25T08:06:32Z", "date_only": false, "value": "2025-03-25T08:06:32.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "137317fa-5194-400d-96c7-2b5c3fbadd21"}, {"timestamp": "2025-03-31T02:30:57Z", "date_only": false, "value": "2025-03-31T02:30:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9579", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "2c8d70a9-eeee-4e0d-abe5-d7e4718f7267", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-24991\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C)\n\ud83d\udd39 Description: Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.\n\ud83d\udccf Published: 2025-03-11T16:59:19.319Z\n\ud83d\udccf Modified: 2025-03-31T01:40:45.263Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24991", "url": "https://t.me/DarkWebInformer_CVEAlerts/9579"}, {"timestamp": "2025-04-01T00:00:00Z", "date_only": true, "value": "2025-04-01", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-24991", "field": "evidence.0.details.due_date", "uuid": "55ef1bb8-3846-473d-b1e1-e28a981f5fcc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-19T21:37:53.689Z", "date_only": false, "value": "2025-05-19T21:37:53.689Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-24991", "record": "MSRC_CVE-2025-24991", "field": "document.tracking.generator.date"}, {"timestamp": "2025-06-10T22:00:00Z", "date_only": false, "value": "2025-06-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0537", "record": "WID-SEC-W-2025-0537", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-06-10T22:00:00Z", "date_only": false, "value": "2025-06-10T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0537", "record": "WID-SEC-W-2025-0537", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-06-11T06:28:06.472Z", "date_only": false, "value": "2025-06-11T06:28:06.472+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0537", "record": "WID-SEC-W-2025-0537", "field": "document.tracking.generator.date"}, {"timestamp": "2025-08-13T13:26:34Z", "date_only": false, "value": "2025-08-13T13:26:34.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "3b7d991f-0b7b-49c3-80c0-fbde995654a3"}, {"timestamp": "2025-10-22T00:33:14Z", "date_only": false, "value": "2025-10-22T00:33:14Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HG9J-PWRG-H4QQ", "record": "GHSA-HG9J-PWRG-H4QQ", "field": "modified"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-24991", "field": "timestamps.recorded_at", "uuid": "55ef1bb8-3846-473d-b1e1-e28a981f5fcc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:26:07.780Z", "date_only": false, "value": "2026-02-02T12:26:07.780493Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/55ef1bb8-3846-473d-b1e1-e28a981f5fcc", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "2a382232-d269-43f4-8fe6-b7c177904bf2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/55ef1bb8-3846-473d-b1e1-e28a981f5fcc"}, {"timestamp": "2026-02-13T19:39:03.668Z", "date_only": false, "value": "2026-02-13T19:39:03.668Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "cve-2025-24991", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-02-26T19:09:39.249Z", "date_only": false, "value": "2026-02-26T19:09:39.249Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-24991", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T19:09:39.249Z", "date_only": false, "value": "2026-02-26T19:09:39.249Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-24991", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T08:59:56.790Z", "date_only": false, "value": "2026-06-17T08:59:56.790", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24991", "record": "FKIE_CVE-2025-24991", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:24.731Z", "date_only": false, "value": "2026-06-19T12:46:24.731411Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/93e926e1-4aa3-4cb1-b25f-bc47b87e489f", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "3012e6f2-53c7-481a-8726-7c8b3778cf0e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/93e926e1-4aa3-4cb1-b25f-bc47b87e489f"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-24991", "field": "timestamps.recorded_at", "uuid": "c3eeea76-290f-43e2-bbc2-291b85623313", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:06:07.001Z", "date_only": false, "value": "2026-06-23T14:06:07.001118Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c3eeea76-290f-43e2-bbc2-291b85623313", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "f0e25fad-ab57-41d3-8db0-b7b5fb2bc15d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c3eeea76-290f-43e2-bbc2-291b85623313"}, {"timestamp": "2026-07-26T02:00:31.645Z", "date_only": false, "value": "2026-07-26T02:00:31.645322Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/3734", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "d797cbdc-344f-41d7-865d-20082b36b6c7", "content": "Microsoft \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432 \u043d\u043e\u0432\u043e\u043c \u043f\u0430\u0442\u0447\u0435 \u0431\u043e\u043b\u0435\u0435 50 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435\n\nMicrosoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043c\u0430\u0440\u0442\u0435, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0435\u0435 \u0431\u043e\u043b\u0435\u0435 50 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 6 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0438 6 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0431\u0430\u0433\u043e\u0432. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Windows NTFS, Remote Desktop Services, Office \u0438 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0443 Windows \u0434\u043b\u044f Linux. \n\n\u0421\u0440\u0435\u0434\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0434\u0435\u043b\u044f\u044e\u0442\u0441\u044f: \n\u2022 CVE-2025-24993 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 (RCE) \u0447\u0435\u0440\u0435\u0437 \u043c\u043e\u043d\u0442\u0430\u0436 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0436\u0435\u0441\u0442\u043a\u043e\u0433\u043e \u0434\u0438\u0441\u043a\u0430 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS \u2013 7.8 \u0431\u0430\u043b\u043b\u0430);\n\u2022 CVE-2025-24991 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows Fast FAT (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS \u2013 5.5 \u0431\u0430\u043b\u043b\u0430);\n\u2022 CVE-2025-26633 - \u043e\u0431\u0445\u043e\u0434 \u0437\u0430\u0449\u0438\u0442\u044b \u0432 \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Microsoft \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435\u043c .msc (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS \u2013 7.0 \u0431\u0430\u043b\u043b\u0430). \n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442: \n\u2022 CVE-2025-24035 \u0438 CVE-2025-24045 - \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 Remote Desktop Services (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS \u2013 8.1 \u0431\u0430\u043b\u043b\u0430 \u0438 8.1 \u0431\u0430\u043b\u043b\u0430);\n\u2022 CVE-2025-26645 - \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 Remote Desktop Client \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS \u2013 8.8 \u0431\u0430\u043b\u043b\u043e\u0432); \n\u2022 CVE-2025-24057 \u2014 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 Office, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0435\u0435 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS \u2013 7.8 \u0431\u0430\u043b\u043b\u0430);\n\u2022 CVE-2025-24084 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Windows \u0434\u043b\u044f Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS \u2013 8.4 \u0431\u0430\u043b\u043b\u0430).\n\n\u042d\u0442\u0438 \u0431\u0430\u0433\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438\u043b\u0438 \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u0442\u0447\u0438, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\n#\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://msrc.microsoft.com/update-guide/releaseNote/2025-Mar", "url": "https://t.me/EchelonEyes/3734"}, {"timestamp": "2026-08-04T13:00:05.850Z", "date_only": false, "value": "2026-08-04T13:00:05.850251Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/367", "record": "CVE-2025-24991", "field": "creation_timestamp", "uuid": "8557f95f-358d-48a7-85fb-8c190b4f3048", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-27363 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 FreeType. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u043f\u043e\u0434\u0433\u043b\u0438\u0444\u043e\u0432 \u0432 TrueType GX \u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0448\u0440\u0438\u0444\u0442\u0430\u0445, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35CVE-2025-26865 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Apache OFBiz \u0434\u043b\u044f e-commerce, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\n\ud83d\udd35CVE-2025-1661 \u2014 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 HUSKY \u0434\u043b\u044f Wordpress \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 LFI-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35CVE-2025-24983, CVE-2025-24984, CVE-2025-24985, CVE-2025-24991, CVE-2025-24993 \u0438 CVE-2025-26633 \u2014 CISA \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0448\u0435\u0441\u0442\u044c \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Windows NTFS, Win32k, Fast FAT \u0438 Management Console (MMC).\n\n\ud83d\udd35CVE-2024-56336 \u2014 Siemens \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u0438\u0432\u043e\u0434\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 SINAMICS S200, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u043e\u0431\u0445\u043e\u0434\u044f \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-26319 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Flowise, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 open-source \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f AI-\u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n#blue_team #CVE_\u0434\u043d\u044f", "url": "https://t.me/purp_sec/367"}]}