329 matches found
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ntfs: Check overflow when iterating ATTRRECORDs The kernel iterates over ATTRRECORDS in mft records in ntfsattrfind. Since ATTRRECORDS are adjacent to each other, the kernel can access the next ATTRRECORD from the end address of...
Astra Linux – Vulnerability in grub2
A out-of-bounds read flaw was discovered in Grub2’s NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack can result in sensitive data cached in memory or EFI variabl...
Astra Linux – Vulnerability in ntfs-3g
In NTFS-3G, from version 2021.8.22, ntfsck has a heap-based buffer overflow issue, involving a value of buffer+5123-2. NOTE: The upstream documentation states that ntfsck is deprecated; however, it is still being distributed with some Linux distributions...
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...
CVE-2026-64431
In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid calling postwritemstfixup for invalid indexblock ntfsicxibsyncwrite calls postwritemstfixup when ntfsibwrite returns an error, intending to restore the buffer after a failed write. However, ntfsibwrite returns an erro...
USN-8597-1: Linux kernel (IBM) vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...
The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the NTFS file system in Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the NTFS file system driver in Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the NTFS file system driver in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
winfsp v2.2B3
WinFsp · Windows File System Proxy WinFsp enables developers to write their own file systems i.e. "Windows drives" as user mode programs and without any knowledge of Windows kernel programming. It is similar to FUSE Filesystem in Userspace for Linux and other UNIX-like computers. winfsp.dev...
USN-8575-1 linux, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-realtime, linux-xilinx-zynqmp vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...
The vulnerability of the NTFS file system in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the NTFS file system in Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
CVE-2026-63793 ntfs: serialize volume label accesses
In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize volume label accesses Protect vol-volumelabel with a mutex and snaphost the label before copytouser. This prevent a use-after-free when FSIOCSETFSLABEL replaces the vol-volumelabel and FSIOCGETTSLABEL reads it...
UBUNTU-CVE-2026-46571
In NTFS-3G through 2026.2.25, a out-of-bounds read exists in ntfsfixfilename in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted fil...
EUVD-2026-44124
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows NTFS allows an authorized attacker to elevate privileges locally...
EUVD-2026-44125
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to elevate privileges with a physical attack...
EUVD-2026-44128
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...
EUVD-2026-44103
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...
EUVD-2026-44090
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...