Curated security research, vulnerabilities, advisories and tools for practitioners.

Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver – CVE-2025-53149

crowdfense.com | vulnerability | High | CVE-2025-53149 | #windows-kernel | #patch-analysis | #cve-2025-53149 | #ksthunk | #heap-overflow | #driver-vulnerability | #kernel-streaming

Summary

Technical deep-dive into CVE-2025-53149, a heap-based buffer overflow in the Windows Kernel Streaming WOW Thunk Service driver (ksthunk.sys).

CVSS: 7.8
Published: 2025-09-04 10:03
Collected: 2026-07-04 11:30

Related coverage