Microsoft: Eight Windows NTFS Vulnerabilities Disclosed Together, Ranging Medium to High
Microsoft's August 2026 Patch Tuesday addressed eight Windows NTFS vulnerabilities, including flaws allowing local privilege escalation and information disclosure.
Key findings
- Eight Windows NTFS vulnerabilities disclosed together on August 11, 2026, ranging from Medium to High severity.
- Three high-severity flaws allow local privilege escalation via buffer overflows or out-of-bounds reads.
- Five medium-severity flaws permit local or physical attackers to disclose information through buffer over-reads.
- All vulnerabilities were patched in Microsoft's August 2026 Patch Tuesday updates.
- No zero-day or actively exploited status reported for this specific NTFS batch in related coverage.
On August 11, 2026, Microsoft released its August Patch Tuesday updates, which included a batch of eight vulnerabilities affecting the Windows NTFS (New Technology File System) component. These vulnerabilities, disclosed simultaneously, range in severity from Medium to High, with several allowing for local privilege escalation or information disclosure. The NTFS component is critical for file management in Windows, making these flaws a significant concern for users.
The disclosed vulnerabilities can be broadly categorized by their impact: privilege escalation and information disclosure. Three high-severity flaws (CVE-2026-62880, CVE-2026-62797, CVE-2026-62700) stem from out-of-bounds reads or heap-based buffer overflows within NTFS, potentially allowing an attacker with local access to gain elevated privileges on the affected system.
Additionally, five medium-severity vulnerabilities (CVE-2026-65784, CVE-2026-62887, CVE-2026-62796, CVE-2026-62793, CVE-2026-61350) are described as out-of-bounds reads or buffer over-reads. These flaws could permit an authorized or, in one case (CVE-2026-61350), an unauthorized attacker with physical access to disclose sensitive information from the system.
Microsoft's August 2026 Patch Tuesday addressed a total of 421 vulnerabilities, with 236 affecting Windows. While this batch of NTFS vulnerabilities did not include any zero-days or actively exploited flaws according to the provided news coverage, the potential for privilege escalation and information disclosure warrants prompt attention from administrators. Rapid7 and Cyber Security News highlighted the overall volume of vulnerabilities patched, noting that Microsoft is aware of exploitation in the wild for other vulnerabilities disclosed on the same day, though not specifically for the NTFS flaws in this batch.
All eight NTFS vulnerabilities were addressed in the August 2026 security updates. Users are advised to ensure their Windows systems are up to date to incorporate these patches. Maintaining updated systems is crucial for mitigating the risks associated with these types of local privilege escalation and information disclosure vulnerabilities. The consistent disclosure of such vulnerabilities underscores the ongoing need for diligent patch management.