OTPulse

Windows NTFS Information Disclosure Vulnerability

MonitorCVSS 5.5CVE-2026-62793Aug 11, 2026
Microsoft
IT in OT - Windows Server and Active Directory are widely deployed in OT environments
Attack path
Attack VectorLocal
Auth RequiredLow
ComplexityLow
User InteractionNone needed
Summary

Buffer over-read in Windows NTFS allows an authorized local attacker to disclose information.

What this means
What could happen
An attacker with local access to a Windows system could read sensitive data from memory, such as configuration details or credentials stored on disk, potentially compromising system security or revealing operational parameters.
Who's at risk
Windows system administrators and OT staff managing Windows servers (2016, 2019, 2022, 2025) or Windows 10/11 workstations used in industrial environments for engineering, configuration, or data storage should patch these systems to prevent local information disclosure.
How it could be exploited
An attacker with local user privileges exploits a buffer over-read flaw in the NTFS driver by accessing specially crafted file system metadata, causing the kernel to leak information from adjacent memory regions.
Prerequisites
  • Local user account access to the Windows system
  • Ability to interact with NTFS file system (standard for any local user)
Low complexity attackRequires local access (not remotely exploitable)Information disclosure only (no code execution)
Exploitability
Unlikely to be exploited — EPSS score 0.3%
Affected products (26)
26 with fix
ProductAffected VersionsFix Status
Windows 10 Version 1809 for 32-bit SystemsAll versionsBuild 10.0.17763.9115
Windows 10 Version 1809 for x64-based SystemsAll versionsBuild 10.0.17763.9115
Windows Server 2019All versionsBuild 10.0.17763.9115
Windows Server 2019 (Server Core installation)All versionsBuild 10.0.17763.9115
Windows Server 2022All versionsBuild 10.0.20348.5499
Remediation & Mitigation
0/2
Schedule — requires maintenance window
0/1

Patching may require device reboot — plan for process interruption

HOTFIXApply Microsoft's 2026-August security update to all affected Windows systems
Long-term hardening
0/1
HARDENINGRestrict local system access to trusted personnel only; enforce strong authentication for engineering workstations and servers
View full vendor advisory
API: /api/v1/advisories/47eadb32-8ee8-49cd-ba0e-68952a17ba76

Get OT security insights every Tuesday

Advisory breakdowns, a weekly summary, and incident analyses for the people actually defending OT environments. Free, no account required.

Windows NTFS Information Disclosure Vulnerability | CVSS 5.5 - OTPulse