CVE-2025-29971HighCVSS 7.5
Web Threat Defense (WTD.sys) Denial of Service Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Out-of-bounds read in Web Threat Defense (WTD.sys) allows an unauthorized attacker to deny service over a network.
🎯 Affected products6
- Windows 11 Version 22H2 for ARM64-based Systems
- Windows 11 Version 22H2 for x64-based Systems
- Windows 11 Version 23H2 for ARM64-based Systems
- Windows 11 Version 23H2 for x64-based Systems
- Windows 11 Version 24H2 for ARM64-based Systems
- Windows 11 Version 24H2 for x64-based Systems
✅ Remediation
KB5058405 (Security Update) — fixed build 10.0.22621.5335 KB5058405 (Security Update) — fixed build 10.0.22631.5335 KB5058411 (Security Update) — fixed build 10.0.26100.4061 KB5061258 (Security HotPatch Update) — fixed build 10.0.26100.3983
🔗 References (7)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29971
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5058405
- referencehttps://support.microsoft.com/help/5058405
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5058411
- referencehttps://support.microsoft.com/help/5058411
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5061258
- referencehttps://support.microsoft.com/help/5061258