CVE-2026-83508: Windows NTFS out-of-bounds read privilege escalation

CVE-2026-83508 · Severity: high · CVSS 7.8 · Published 2026-10-13

Windows NTFS, the file system that stores and manages data on Windows computers, contains an out-of-bounds read vulnerability that allows an authorized local user to escalate their privileges to a higher level of system access. An attacker with a valid local account could exploit this flaw to gain administrative control of the machine and compromise its security.

Technologies: Microsoft Windows NTFS. Vendors: Microsoft.

Quick answers

Is CVE-2026-83508 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-83508 being exploited in the wild.
How severe is CVE-2026-83508?
High severity, with a CVSS score of 7.8, published 13 October 2026.
Which products and versions are affected?
Microsoft Windows NTFS.
Is there a fix for CVE-2026-83508?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-83508 attacked?
It is attacked with local access.
Am I affected by CVE-2026-83508?
Check whether you run Microsoft Windows NTFS. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An out-of-bounds read vulnerability exists in Windows NTFS that can be exploited by an authenticated local attacker to achieve privilege escalation. The vulnerability requires local access and valid user credentials; it does not require user interaction. Exploitation allows an attacker to escalate from a standard user account to a higher privilege level.

Affected products

  • Microsoft Windows NTFS

Timeline

  • 2026-10-13: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.