Executive brief
Windows NTFS is the file system underlying most Microsoft Windows installations, managing how data is stored and accessed on disk. A heap-based buffer overflow in NTFS allows a local attacker to execute arbitrary code with system-level privileges, potentially compromising the entire system.
Technical details
A heap-based buffer overflow vulnerability exists in the Windows NTFS file system driver. The vulnerability can be triggered by a local attacker processing a specially crafted file system request, leading to memory corruption. An attacker with local access can exploit this flaw to execute arbitrary code in kernel context, gaining complete system control. The attack vector is local and typically requires no user interaction or special privileges beyond basic file system access.
Affected products
- Microsoft Windows <UNKNOWN>
Timeline
- 2026-09-08: disclosed