Zero-Day Windows Kernel Flaw Exploited for Over a Year Finally Patched by Microsoft

A Windows zero-day vulnerability (CVE-2025-24983) has been exploited since March 2023 before being patched in Microsoft's March 2025 update. The use-after-free flaw in the Win32 Kernel Subsystem allows privilege escalation to SYSTEM level. Attackers used the PipeMagic backdoor to target pr...