PT-2025-10811 · Microsoft · Windows

Skorikari

·

Publicado

2025-03-11

·

Atualizado

2025-07-03

·

CVE-2025-24061

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Windows 10 Version 1809 Windows versions prior to the patch released on 2025-03-11
Description A security-feature bypass vulnerability in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature locally. This issue is related to a failure in the protection mechanism, enabling attackers to affect the system. The vulnerability may allow an attacker to bypass existing security restrictions and gain access to encrypted data.
Recommendations For Windows 10 Version 1809, apply the patch released on 2025-03-11 to resolve the issue. For Windows versions prior to the patch released on 2025-03-11, update to a version that includes the fix for this vulnerability. As a temporary workaround, consider restricting access to sensitive data and implementing additional security measures to minimize the risk of exploitation.

Correção

Protection Mechanism Failure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2025-02758
CVE-2025-24061

Produtos afetados

Windows