Microsoft Windows NTFS Privilege Escalation Vulnerability

A vulnerability allowing out-of-bounds read in Windows NTFS has been identified, which could enable an authorized attacker to locally elevate privileges. This issue affects multiple Windows versions, including various releases of Windows 10, Windows 11, Windows Server 2012, Windows Server 2016, Windows Server 2019, Windows Server 2022, and Windows Server 2025. The vulnerability arises from improper handling of memory, allowing attackers to access restricted areas and potentially gain SYSTEM privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM rights.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. This security update is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5099538, KB5099539, KB5101649, KB5099444, KB5099445, and KB5099540.