CVE-2026-83585
HighCVSS 7.8Summary
Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.
Risk Assessment
This flaw could let a local attacker escalate privileges and potentially execute code, threatening file system integrity.
Recommendation
Immediately apply Microsoft patches for Windows NTFS and monitor for unusual operations on NTFS volumes.
Other vulnerabilities in Windows NTFS
See all- CVE-2026-96931High
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96928High
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96918High
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96916High
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96867High
Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
- CVE-2026-96217High
A heap-based buffer overflow vulnerability in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-83859High
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-83712High
An out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.
- CVE-2026-83652High
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-83640High
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Original NVD description (English source)
Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS