Microsoft Finally Patches 2-Year-Old Windows Kernel Security Flaw

Microsoft has released a critical patch for a 2-year-old Windows kernel security vulnerability.

This vulnerability, identified as CVE-2025-24983, allows attackers to exploit a weakness in the Windows Win32 Kernel Subsystem, leading to an elevation of privilege.

The patch comes after extensive research by security experts, who first detected the exploit in the wild in March 2023.

#ESETresearch has discovered a zero day exploit abusing #CVE-2025-24983 vulnerability in Windows Kernel to elevate privileges (#LPE). First seen in the wild in March 2023, the exploit was deployed through #PipeMagic backdoor on the compromised machines. 1/4 pic.twitter.com/qCOgYiltfs

— ESET Research (@ESETresearch) March 11, 2025

Understanding the Vulnerability

CVE-2025-24983 is categorized as an elevation of privilege vulnerability, classified with a severity rating of “Important.”

It falls under the Common Weakness Enumeration (CWE-416), which involves the use of memory after it has been freed.

This type of vulnerability is particularly dangerous ...