CVE-2026-69505
HighCVSS 8.0Exploitation Probability (EPSS)
Elevated risk54th percentile - higher than 54% of all known CVEs
Summary
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
Risk Assessment
A network attacker could exploit this vulnerability to gain elevated privileges, potentially compromising system integrity.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Windows NTFS
See all- CVE-2026-69463Critical
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.
- CVE-2026-20840High
A heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
- CVE-2025-24993HighActively exploited
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
- CVE-2025-24991MediumActively exploited
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
- CVE-2025-24984MediumActively exploited
A vulnerability in Windows NTFS involves insertion of sensitive information into a log file. An attacker with physical access can exploit this to disclose information.
- CVE-2021-31956HighActively exploited
Windows NTFS Elevation of Privilege Vulnerability. Technical details are not provided in the description.
- CVE-2026-96935Medium
Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.
- CVE-2026-96931High
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96928High
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96927Medium
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS