CVE-2026-81971
HighCVSS 7.0Summary
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit the race condition to corrupt data or gain higher privileges, potentially leading to system compromise.
Recommendation
Install the latest Windows security updates and monitor systems for unusual NTFS-related activity.
Other vulnerabilities in Windows NTFS
See all- CVE-2026-96931High
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96928High
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96918High
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96916High
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96867High
Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
- CVE-2026-96217High
A heap-based buffer overflow vulnerability in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-83859High
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-83712High
An out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.
- CVE-2026-83652High
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-83640High
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

