Microsoft Windows NTFS Stack-Based Buffer Overflow Vulnerability Allowing Local Remote Code Execution

A stack-based buffer overflow vulnerability has been identified in the Windows NTFS file system. This vulnerability allows an authorized attacker to execute code locally. It affects several versions of Windows Server, including 2012 R2, 2008 R2, and 2008, across different installation types such as Server Core and standard installations.

Impact

Exploitation of this vulnerability could lead to unauthorized local execution of code with the privileges of the user running the application or process that triggers the vulnerability.

Remediation

Users can apply the security update for this vulnerability, which is included in the September 2025 Monthly Rollup, available through the Microsoft Update Catalog. Specific Knowledge Base articles for each affected Windows Server version are also available.