Microsoft Windows NTFS Out-of-Bounds Read Vulnerability Allowing Local Information Disclosure

A vulnerability allowing out-of-bounds read has been identified in the Windows NTFS file system. This issue allows an authorized attacker to locally disclose information by reading small portions of heap memory. The vulnerability arises when a local user is tricked into mounting a specially crafted virtual hard disk (VHD), which then triggers the out-of-bounds read condition.

Impact

Exploitation of this vulnerability could lead to unauthorized local information disclosure.

Remediation

Users can apply the security updates provided in the Microsoft Knowledge Base articles KB5053598, KB5053599, KB5053620, KB5053627, KB5053886, KB5053887, KB5053888, KB5053594, and KB5053618 to address this vulnerability.