Executive brief
Windows NTFS is the default file system that manages all data storage on Windows computers. A heap-based buffer overflow vulnerability allows an attacker on a network to execute arbitrary code on vulnerable systems, potentially leading to complete system compromise, data theft, or ransomware deployment.
Technical details
This is a heap-based buffer overflow vulnerability in the Windows NTFS file system implementation. The vulnerability is remotely exploitable over a network without requiring authentication or user interaction. An attacker can craft a malicious network packet or file system operation to trigger the buffer overflow, leading to arbitrary code execution with the privileges of the NTFS driver (typically kernel-level). The attack vector is network-based, making this a wormable vulnerability with high attack surface. Microsoft has released security updates to address this issue.
Affected products
- Microsoft Windows NTFS <UNKNOWN>
Timeline
- 2026-09-08: disclosed