Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to execute arbitrary code.

🗓️ 03 Oct 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec🔗 bdu.fstec.ru👁 2 Views

NTFS on Windows has a dynamic memory buffer overflow vulnerability allowing arbitrary code execution.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB		CVE-2026-20922
13 Jan 202617:56
–attackerkb
Circl		CVE-2026-20922
13 Jan 202618:01
–circl
CNNVD		Microsoft Windows NTFS 安全漏洞
13 Jan 202600:00
–cnnvd
CNVD		Microsoft Windows NTFS Code Execution Vulnerability
19 Jan 202600:00
–cnvd
CVE		CVE-2026-20922
13 Jan 202617:56
–cve
Cvelist		CVE-2026-20922 Windows NTFS Remote Code Execution Vulnerability
13 Jan 202617:56
–cvelist
EUVD		EUVD-2026-2115
13 Jan 202617:56
–euvd
Japan Vulnerability Notes		Security information for Hitachi Disk Array Systems
20 Feb 202609:35
–jvn
Microsoft KB		January 13, 2026—KB5073379 (OS Build 26100.32230)
13 Jan 202616:00
–mskb
Microsoft KB		January 13, 2026—KB5073450 (OS Build 25398.2092)
13 Jan 202616:00
–mskb
Rows per page
Vulners
Node
microsoftwindows_server_2025Range<10.0.26100.32230
OR
microsoftwindows_11_24h2Range<10.0.26100.7623
OR
microsoftwindows_server_2022,_23h2_edition_(server_core_installation)Range<10.0.25398.2092
OR
microsoftwindows_11_23h2Range<10.0.22631.6491
OR
microsoftwindows_11_25h2Range<10.0.26200.7623
OR
microsoftwindows_server_2025_(server_core_installation)Range<10.0.26100.32230
OR
microsoftwindows_10_22h2Range<10.0.19045.6809
OR
microsoftwindows_10_21h2Range<10.0.19044.6809
OR
microsoftwindows_server_2022_(server_core_installation)Range<10.0.20348.4648
OR
microsoftwindows_server_2022Range<10.0.20348.4648
OR
microsoftwindows_server_2019_(server_core_installation)Range<10.0.17763.8276
OR
microsoftwindows_server_2019Range<10.0.17763.8276
OR
microsoftwindows_10_1809Range<10.0.17763.8276
OR
microsoftwindows_server_2012_r2_(server_core_installation)Range<6.3.9600.22968
OR
microsoftwindows_server_2012_r2Range<6.3.9600.22968
OR
microsoftwindows_server_2012_(server_core_installation)Range<6.2.9200.25868
OR
microsoftwindows_server_2012Range<6.2.9200.25868
OR
microsoftwindows_server_2008_r2_service_pack_1_(server_core_installation)Range<6.1.7601.28117
OR
microsoftwindows_server_2008_r2_service_pack_1Range<6.1.7601.28117
OR
microsoftwindows_server_2008_service_pack_2_(server_core_installation)Range<6.0.6003.23717
OR
microsoftwindows_server_2008_service_pack_2Range<6.0.6003.23717
OR
microsoftwindows_server_2016_(server_core_installation)Range<10.0.14393.8783
OR
microsoftwindows_server_2016Range<10.0.14393.8783
OR
microsoftwindows_10_1607Range<10.0.14393.8783

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
16 Jan 2026 00:00Current
6.2Medium risk
Vulners AI Score6.2
CVSS 26.8
CVSS 37.8
EPSS0.00569
New TechnologyFile SystemWindowsBuffer OverflowDynamic MemoryArbitrary Code Execution
2