Microsoft CVEs Address Event Format Vulnerabilities

Microsoft CVEs Address Event Format Vulnerabilities

First seen 18 Feb 2026, 12:23 UTC Api.Msrc.Microsoft 39.1

Article Content

Browse articles
ThreatCluster

Microsoft has published information on two vulnerabilities: CVE-2025-37938 and CVE-2024-43891. CVE-2025-37938, published on May 20, 2025, involves verification of event formats with '%*p..', while CVE-2024-43891, published on August 26, 2024, pertains to ensuring format files honor EVENT_FILE_FL_FREED. These vulnerabilities may affect systems utilizing these event formats.

Timeline

2024-08-26
CVE-2024-43891 published
2025-05-20
CVE-2025-37938 published
2026-02-18
Information published on CVE-2025-37938
2026-02-18
Information published on CVE-2024-43891