EUVD-2026-73460
GHSA-7m9j-gm88-v9mg
Severity by source
AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Network-accessible NTFS via SMB, low-privileged attacker, user interaction required; full CIA impact after privilege escalation to SYSTEM within unchanged scope.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
AnalysisAI
Privilege escalation via out-of-bounds read (CWE-125) in the Windows NTFS kernel driver affects virtually every current Windows release - from Windows 10 1607 and Server 2012 through Windows 11 26H2 and Server 2025 - allowing a low-privileged network attacker to achieve full CIA compromise of the target system. The vulnerability is reachable over the network (consistent with NTFS driver exposure via SMB), requires only low-level authentication and some user interaction, and can yield SYSTEM-level access. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a low-privileged network account on the target system (PR:L per the CVSS vector - at minimum, a domain user or equivalent SMB-authenticated session) and some form of user interaction (UI:R), which likely involves a victim user or process accessing an attacker-controlled or crafted NTFS resource such as a network share or mounted volume. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.0 vector (AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) accurately reflects the threat profile: network-accessible, low complexity, low-privileged attacker, with some required user interaction, yielding full CIA impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security update for the applicable Windows version targeting the fixed builds confirmed in EUVD-2026-73460. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, audit your Windows environment to identify all affected systems running Windows 10 (all versions through build 26H2), Windows 11, and Windows Server 2012 through 2025, prioritizing internet-facing servers and systems in sensitive network zones. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today