Executive brief
Windows NTFS is a core file system component used to store and organize data on Windows systems. A stack-based buffer overflow vulnerability allows a remote attacker to execute arbitrary code on an affected system without authentication, potentially compromising data confidentiality, system integrity, and availability.
Technical details
A stack-based buffer overflow exists in the Windows NTFS file system driver. The vulnerability allows an unauthenticated attacker to achieve remote code execution over the network by supplying crafted input to the NTFS subsystem. This vulnerability requires network connectivity but does not require prior authentication or user interaction. Successful exploitation enables arbitrary code execution with NTFS driver-level privileges, potentially leading to complete system compromise.
Affected products
- Microsoft Windows <UNKNOWN>
Timeline
- 2026-09-08: disclosed