Executive brief
Windows NTFS is the file system used by Windows operating systems to store and manage files on disk. A heap-based buffer overflow vulnerability in NTFS could allow an attacker with physical access to a computer to execute code with system-level privileges, potentially compromising the entire system and any data stored on it.
Technical details
A heap-based buffer overflow exists in the Windows NTFS file system driver that can be triggered through a specially crafted file or disk structure. The vulnerability requires physical access to the affected system to exploit. An attacker could craft malicious NTFS structures that, when processed by the kernel, overflow a heap buffer and execute arbitrary code in kernel context. This represents a local privilege escalation and code execution vulnerability. A patch is available from Microsoft through their security update channel.
Affected products
- Microsoft Windows <UNKNOWN>
Timeline
- 2026-09-08: disclosed