CVE-2026-69312

CVE-2026-69312 is an out-of-bounds read (CWE-125) in the Windows NTFS file system component, rated 7.8 (High) with a local attack vector and only low privileges required. An authorized local user can trigger the flaw through file-system operations that cause NTFS to read past the bounds of an allocated buffer. Successful exploitation lets the attacker elevate privileges on the local machine, with high impact on confidentiality, integrity, and availability per the CVSS scoring. Any Windows system running NTFS is potentially affected, though the available data does not specify which Windows versions or builds are vulnerable. Exploitation status is currently quiet: no public proof-of-concept, not listed in CISA KEV, and a low 0.3% EPSS probability of exploitation within 30 days.

What to do: Apply the Microsoft security update that addresses CVE-2026-69312 as soon as it is released, checking Microsoft's advisory for the exact affected version ranges since they are not listed here. Because this is a local privilege escalation requiring an authorized low-privileged user, prioritize multi-user systems such as RDS/session hosts, shared servers, and workstations where untrusted users can run code. No public exploit or in-the-wild exploitation is known, and no workaround is documented in the available data.