Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability Allowing Local Code Execution

A heap-based buffer overflow vulnerability has been identified in the Windows NTFS file system. This vulnerability allows an authorized attacker to execute code locally. It affects several different versions and ranges of Windows operating systems, including various editions of Windows 10, Windows 11, Windows Server 2012, and several other Windows Server versions.

Impact

Exploitation of this vulnerability could lead to unauthorized local code execution.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5073724, KB5073457, KB5073379, KB5073696, KB5073698, KB5073722, and KB5074109.