An out‑of‑bounds read vulnerability in the Windows NTFS file system can be exploited by an authorized local user to gain higher privileges. The flaw, identified as CWE‑125, allows reading data beyond the intended buffer bounds, which can disclose sensitive information and enable the attacker to exploit further weaknesses to elevate privileges. The impact is therefore a local privilege escalation that could compromise the integrity and confidentiality of the affected system.

Affected systems include a wide range of Microsoft Windows operating systems such as Windows 10 versions 1607, 1809, 21H2, 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1; and numerous Windows Server releases from Server 2012 through Server 2025, including both full and server core installations.

The CVSS base score of 7.8 indicates high severity for users with local access. The EPSS score is currently unavailable, and the vulnerability is not listed in the CISA KEV catalog, suggesting no widely known public exploits yet. However, because the attack requires local authorization, the likely vector is a user with some privileges attempting to manipulate NTFS metadata. The risk remains significant for environments with increased local access and without the latest patches, as exploitation could lead to full system compromise.