cbcvebase.
CVE-2026-25175
published 2026-03-10

CVE-2026-25175: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

Affected

32 ranges· showing 25
VendorProductVersion rangeFixed in
microsoftwindows_10_1607< 10.0.14393.895710.0.14393.8957
microsoftwindows_10_1809< 10.0.17763.851110.0.17763.8511
microsoftwindows_10_21h2< 10.0.19044.705810.0.19044.7058
microsoftwindows_10_22h2< 10.0.19045.705810.0.19045.7058
microsoftwindows_10_version_1607>= 10.0.14393.0 < 10.0.14393.895710.0.14393.8957
microsoftwindows_10_version_1809>= 10.0.17763.0 < 10.0.17763.851110.0.17763.8511
microsoftwindows_10_version_21h2>= 10.0.19044.0 < 10.0.19044.705810.0.19044.7058
microsoftwindows_10_version_22h2>= 10.0.19045.0 < 10.0.19045.705810.0.19045.7058
microsoftwindows_11_23h2< 10.0.22631.678310.0.22631.6783
microsoftwindows_11_version_22h3>= 10.0.22631.0 < 10.0.22631.678310.0.22631.6783
microsoftwindows_11_version_23h2>= 10.0.22631.0 < 10.0.22631.678310.0.22631.6783
microsoftwindows_server_2012
microsoftwindows_server_2012>= 6.2.9200.0 < 6.2.9200.259736.2.9200.25973
microsoftwindows_server_2012_r2>= 6.3.9600.0 < 6.3.9600.230746.3.9600.23074
microsoftwindows_server_2016< 10.0.14393.895710.0.14393.8957
microsoftwindows_server_2016>= 10.0.14393.0 < 10.0.14393.895710.0.14393.8957
microsoftwindows_server_2019< 10.0.17763.851110.0.17763.8511
microsoftwindows_server_2019>= 10.0.17763.0 < 10.0.17763.851110.0.17763.8511
microsoftwindows_server_2022< 10.0.20348.483010.0.20348.4830
microsoftwindows_server_2022>= 10.0.20348.0 < 10.0.20348.489310.0.20348.4893
microsoftwindows_server_2022_23h2< 10.0.25398.220710.0.25398.2207
msrcwindows_10_version_1607
msrcwindows_10_version_1809
msrcwindows_10_version_21h2
msrcwindows_10_version_22h2