Executive brief
Windows includes a Universal Disk Format (UDF) file system driver used to read disks and optical media. A heap-based buffer overflow in this driver allows a local attacker with user-level access to execute arbitrary code with elevated privileges, potentially compromising system security and enabling malware installation or data theft.
Technical details
A heap-based buffer overflow vulnerability exists in the Windows UDFS (udfs.sys) driver. The vulnerability requires local code execution as a prerequisite (an authorized user), and allows an attacker to overflow a heap buffer through malformed UDF disk structures or crafted input. Successful exploitation results in privilege escalation from user mode to kernel mode, enabling arbitrary code execution with SYSTEM privileges. This vulnerability affects Windows systems with UDFS driver enabled; patching and privilege restriction mitigations are available from Microsoft.
Affected products
- Microsoft Windows multiple versions
Timeline
- 2026-09-08: disclosed