Two of the six active exploits (CVE-2025-24985 and CVE-2025-24993) are remote code execution vulnerabilities, through which attackers trick users into mounting a malicious VHD file to run code ...