CVE-2026-96928
HighCVSS 7.8Summary
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Risk Assessment
The flaw can be exploited by an attacker with local access to disclose sensitive data or escalate privileges on the system.
Recommendation
Apply Microsoft security updates for the NTFS driver and limit local logon rights to the minimum necessary.
Other vulnerabilities in Windows NTFS
See all- CVE-2026-96931High
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96918High
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96916High
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-96867High
Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
- CVE-2026-96217High
A heap-based buffer overflow vulnerability in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-83859High
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-83712High
An out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.
- CVE-2026-83652High
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-83640High
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
- CVE-2026-83585High
Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS