CVE-2026-96867
HighCVSS 7.8Summary
Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
Risk Assessment
An attacker could exploit this vulnerability to execute arbitrary code in the system context, potentially leading to system takeover.
Recommendation
Apply security patches and restrict access to NTFS file systems for unauthorized users.
Other vulnerabilities in Windows NTFS
See all- CVE-2026-96931High
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96928High
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96918High
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96916High
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96217High
A heap-based buffer overflow vulnerability in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-83859High
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-83712High
An out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.
- CVE-2026-83652High
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-83640High
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
- CVE-2026-83585High
Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

