CVE-2026-96925
MediumCVSS 5.5Summary
Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally. The flaw results from improper handling of numeric values in the NTFS driver.
Risk Assessment
An authenticated user could locally read sensitive data from kernel memory, potentially resulting in leakage of confidential information.
Recommendation
Promptly install Microsoft security patches for the NTFS driver and monitor for unusual file system operations.
Other vulnerabilities in Windows NTFS
See all- CVE-2026-96935Medium
Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.
- CVE-2026-96931High
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96928High
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96927Medium
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
- CVE-2026-96918High
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96916High
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96867High
Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
- CVE-2026-96217High
A heap-based buffer overflow vulnerability in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-83864Medium
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.
- CVE-2026-83859High
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS