Constellation · CASCA

Constellation explorer

Every signal has a story.Follow the evidence.

Return to triage

Find a CVE by identifier or text

↵ select

Minimum eligible CVSSOrderKEV only

Start with evidence

Current exploration

CVE-2025-24991

Your trail

Where next?

Selected cve

CVE-2025-24991

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

53 retained evidence references · snapshot-bound · open authoritative view

StateSource-scoped evidence

Priority63.7–69.6

Coverage92.9%

Connections40

Choose an action.

Evidence state

identity unresolved
known present
evidence unknown

Snapshot-bound reason tuple

Evidence supportedfactor_a_kev

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Evidence supportedfactor_b_epss

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Evidence supportedfactor_c_cvss

Eligible evidence is present for this bounded claim.

Revision: casca-direct-cvss-eligibility-v1
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Source-reported scopefactor_d_breadth

The source assertion is retained, but its canonical identity is unresolved.

Revision: casca-factor-d-obligations-v1
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: Resolve identity

Connections 40

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows Server 2022

78af1e5d-0b72-4c42-a1ad-796403d44452

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows Server 2022, 23H2 Edition (Server Core installation)

89b0d704-c7c5-422f-8c38-a6a3a446c42e

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows 11 Version 24H2

30fdce94-2005-42e5-868e-bf3991ad5360

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows 11 version 22H3

29d8b7cb-0e15-467e-bedc-9ce7b70306c2

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows 11 Version 23H2

861d8441-16a2-4b30-92fd-1f2cb47031ad

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows Server 2016

63f29c69-e01d-4e78-bd07-441b958bd98a

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows Server 2008 Service Pack 2 (Server Core installation)

75c85bf3-4d40-4ff0-9544-4f2e38c57820

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows 11 version 22H2

fc63f49b-63eb-4ebd-a13c-6ed2f15d7959

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows Server 2008 R2 Service Pack 1

94f2999d-3211-4729-bbc7-cae8d5b7a025

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows Server 2012

2a73226d-2275-4842-9747-1b3a0fa54f14

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows Server 2008 Service Pack 2

4c152992-d357-4b8c-8550-6bf62839874b

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows Server 2025 (Server Core installation)

b068decf-1e0e-4209-8411-48ee6244ee35

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows Server 2012 (Server Core installation)

d55cd661-4326-4295-9dbb-504fb812d12c

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows Server 2016 (Server Core installation)

71a88e63-be07-443c-804d-d992fc097e92

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows Server 2012 R2 (Server Core installation)

be5b2e95-2d98-4991-853c-23f79023b419

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows 10 Version 1809

3f77f9eb-71ab-41d4-af1f-c3c523862ed1

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows Server 2025

8fa78bd4-055e-4257-bd03-a339c9cb6a1e

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows Server 2008 R2 Service Pack 1 (Server Core installation)

176fc1c4-b1c2-4a4d-a313-e586eaed6c15

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows 10 Version 22H2

b66074d4-6345-4901-96d7-c2e5c6397848

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows 10 Version 1507

4ced98d9-72a1-455b-bc14-2e46ffca4c79

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows 10 Version 21H2

c6d00fa8-5fc9-45df-bde3-c7ef2eaa0234

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows Server 2019

ed7e6cf0-b4fb-4383-a627-59ece1834719

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows 10 Version 1607

d178e335-7425-443f-a6c2-c9221edab68a

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows Server 2012 R2

9450d0a0-9684-4dfc-8fba-573f85129a75

has cited scope1 retained · stored CVE-2025-24991 → Microsoft · Windows Server 2019 (Server Core installation)

005224ed-2529-4eba-a587-056e1e9a89fd

has vulnerable target scope2 retained · stored CVE-2025-24991 → microsoft · windows_11_23h2

e98b2a5d-3fdb-4435-b81c-60aa4a71bcb5f8b38266-f674-4a2a-98fb-a83ecf2a3192

has vulnerable target scope1 retained · stored CVE-2025-24991 → microsoft · windows_server_2016

53c99e53-6956-4e21-868b-6062e401cbf2

has vulnerable target scope3 retained · stored CVE-2025-24991 → microsoft · windows_server_2008

687093f6-35c3-4ba1-b333-826f281ba60b6ae96fd5-7dfd-495a-a628-34efcc3b6fccbd09abe5-817e-49f5-a850-327fabefd73b

has vulnerable target scope1 retained · stored CVE-2025-24991 → microsoft · windows_server_2019

5b0797cf-bc92-46e5-af55-2af4e3c75703

has vulnerable target scope1 retained · stored CVE-2025-24991 → microsoft · windows_server_2025

e33c5e17-86da-4a76-be20-0f6fb7a19e94

has vulnerable target scope2 retained · stored CVE-2025-24991 → microsoft · windows_server_2012

6f1f06b1-cb54-4204-b76f-2b6145acddb28bb8834c-3d12-4c64-b87e-84ef7d17a319

has vulnerable target scope2 retained · stored CVE-2025-24991 → microsoft · windows_10_1607

1c2dce8e-ee7a-4f10-89ea-4f383aa68040d9bd01a3-8ea0-4bfc-8902-8fed1fc01f29

has vulnerable target scope2 retained · stored CVE-2025-24991 → microsoft · windows_11_24h2

74ad007a-4381-4f9c-9414-95efe4e9f3a1cb317ff3-4c7b-4071-beca-11511041b9bc

has vulnerable target scope2 retained · stored CVE-2025-24991 → microsoft · windows_10_1507

52518154-05d8-4865-8d77-b15484c26839beadac58-9202-4159-8382-e98b4dbe6012

has vulnerable target scope2 retained · stored CVE-2025-24991 → microsoft · windows_10_1809

2884a579-7045-41c8-a6f7-8c2563bee697d3451d54-7ba6-4999-b063-10debeb93e9e

has vulnerable target scope3 retained · stored CVE-2025-24991 → microsoft · windows_10_22h2

017f0b9f-fbf1-4b6a-b37b-2c286b75418d4edca790-8476-43f0-be1e-2ed748cbf59fac1dd7a2-caf2-4f8f-a621-349fe86b799c

has vulnerable target scope1 retained · stored CVE-2025-24991 → microsoft · windows_server_2022_23h2

f4d465ef-3554-486b-b94c-5cb540103c38

has vulnerable target scope1 retained · stored CVE-2025-24991 → microsoft · windows_server_2022

3393f862-96e5-4d6b-a92f-348a474faaad

has vulnerable target scope3 retained · stored CVE-2025-24991 → microsoft · windows_10_21h2

32b9d6bc-2708-42fd-b964-de575130ddb87041d875-2853-4629-a09b-f6862516e191c65c6219-002b-4acd-be16-515ee47b899e

has vulnerable target scope2 retained · stored CVE-2025-24991 → microsoft · windows_11_22h2

281aa513-c6cd-49b1-b061-6552141f56af3352b45a-3292-4661-9b25-437f58251174

Focused snapshot evidence neighborhood.

CVEProductSignalSelected / traceVisual proximity carries zero evidence weight.

Data as of

Evidence current through Aug 27, 2026, 6:09 PM UTC · 41 entities · 40 relationships · bounded complete