CVE-2026-49184 Windows NTFS Remote Code Execution Vulnerability

...

CVE-2026-58640

CVE-2026-58640 is a heap-based buffer overflow in Windows NTFS that enables an authorized local attacker to execute code. The vulnerability is tied to Windows NTFS logic and has a CVSS v3.1 score of 7.3 (HIGH) with local access required and user interaction. Affected component: Windows NTFS; root...

CVE-2026-58640 Windows NTFS Remote Code Execution Vulnerability

...

Windows NTFS Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...

Windows NTFS Elevation of Privilege Vulnerability

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...

Windows NTFS Remote Code Execution Vulnerability

Integer underflow wrap or wraparound in Windows NTFS allows an unauthorized attacker to execute code locally...

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

PT-2026-58596

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A heap-based buffer overflow occurs in Windows NTFS, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that...

PT-2026-58368

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An out-of-bounds read in Windows NTFS allows an unauthorized attacker to execute code locally. An out-of-bounds read occurs when a program reads data past the end of the intended buffer,...

PT-2026-58600

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An integer overflow or wraparound occurs in the Windows NTFS file system, which allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment,...

PT-2026-58381

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An incorrect conversion between numeric types in the Windows NTFS file system allows an authorized attacker with local access to elevate their privileges locally. Recommendations At the...

KB5099414: Windows 11 version 23H2 Security Update (July 2026)

The remote Windows host is missing security update 5099414. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. CVE-2026-50471 - Heap-based buffer overflow in Windows FTP Service allows an...

PYSEC-2026-2463 Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windows

Impact Arbitrary file write leading to remote code execution when cloning or checking out a malicious Git repository on Windows. Dulwich's path-element validator accepted tree entries whose filenames contained bytes that Windows interprets as structural path syntax: - \ — the Windows path...

MGASA-2026-0238 Updated 7zip packages fix a security vulnerability

7-Zip has a heap buffer overflow via NTFS compressed stream buffer under-allocation. CVE-2026-48095...

The vulnerability of the `ntfs_init_from_boot()` function in the `fs/ntfs3/super.c` file of the NTFS file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ntfsinitfromboot function in the fs/ntfs3/super.c file of the NTFS file system in the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...