The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2025-27742

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally...

CVE-2025-27741

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally...

CVE-2025-27733

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally...

CVE-2025-27733

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally...

CVE-2025-27483

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally...

CVE-2025-27483

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally...

CVE-2025-21197

Improper access control in Windows NTFS allows an authorized attacker to disclose file path information under a folder where the attacker doesn't have permission to list content...

CVE-2025-27733 NTFS Elevation of Privilege Vulnerability

...

CVE-2025-27733 NTFS Elevation of Privilege Vulnerability

...

CVE-2025-27733

CVE-2025-27733 is a local elevation-of-privileges vulnerability in Windows NTFS caused by an out-of-bounds read. The issue can be exploited by a local attacker to gain SYSTEM-like privileges on affected systems. Connected sources corroborate the NTFS-root cause and the elevated-privileges impact....

CVE-2025-27483 NTFS Elevation of Privilege Vulnerability

...

CVE-2025-27483 NTFS Elevation of Privilege Vulnerability

...

CVE-2025-27483

CVE-2025-27483 is an NTFS elevation-of-privilege issue described as an out-of-bounds read in Windows NTFS that could allow a local attacker to obtain elevated privileges. The CVE is tied to Windows NTFS and is rated HIGH (CVSS 3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; base score 7.8). Public refe...

CVE-2025-21197

CVE-2025-21197 is an information disclosure in Windows NTFS due to improper access control, enabling an authorized user to disclose file path information in folders they cannot list. Connected sources corroborate NTFS as affected and classify the impact as data exposure. Mitigation involves apply...

CVE-2025-21197 Windows NTFS Information Disclosure Vulnerability

...

CVE-2025-21197 Windows NTFS Information Disclosure Vulnerability

...

CVE-2025-27742 NTFS Information Disclosure Vulnerability

...

CVE-2025-27742 NTFS Information Disclosure Vulnerability

...

CVE-2025-27742

CVE-2025-27742 corresponds to an out-of-bounds read in Windows NTFS that can allow a local attacker to disclose information. The NVD entry lists a CVSS v3.1 base score of 5.5 (LOCAL, LOW attack complexity, NONE privileges, UI REQUIRED) with High confidentiality impact and no impact to integrity/a...