Executive brief
Windows NTFS is the primary file system used in modern Windows operating systems to store and manage files. This vulnerability allows a local user with existing system access to read sensitive information that should not be accessible to them, potentially exposing confidential data. While an attacker must already have authorized access to the system, the vulnerability bypasses normal file access controls.
Technical details
This is an out-of-bounds read vulnerability in the Windows NTFS file system driver. The vulnerability allows an authenticated local attacker to read memory contents beyond intended buffer boundaries, potentially disclosing sensitive information from kernel memory or other protected regions. The attack requires local system access and does not involve network-based exploitation. Microsoft has addressed this issue through a security update that bounds the memory access properly.
Affected products
- Microsoft Windows NTFS multiple Windows versions
Timeline
- 2026-08-11: disclosed