CVE-2026-69265: Windows NTFS Elevation of Privilege Vulnerability

Q: Which systems are in scope for this issue?

The affected software list includes Microsoft Windows 10, Windows 11, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, Windows Server 2019, Windows Server 2022, and Windows Server 2025.

Q: What level of access does an attacker need to exploit this vulnerability?

An attacker must already be authorized on the affected system and exploit the issue locally. The vulnerability does not indicate network-based exploitation or required user interaction.

Q: What is the potential impact after successful exploitation?

Successful exploitation allows local elevation of privilege. The supplied vector rates confidentiality, integrity, and availability impact as high.

Published Sep 8, 2026

Updated

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

Other sources

Windows NTFS Elevation of Privilege Vulnerability

— Microsoft

Affected Software

30 affected componentsFixes available

Microsoft Windows Server 2016<10.0.14393.9512

10.0.14393.9512

Microsoft Windows Server 2012<6.2.9200.26349

6.2.9200.26349

Microsoft Windows Server 2012 R2<6.3.9600.23397

6.3.9600.23397

Microsoft Windows Server 2025<10.0.26100.33438

10.0.26100.33438

Microsoft Windows 11=24H2

10.0.26100.9445

Microsoft Windows 11=26H1

10.0.28000.2954

Microsoft Windows Server 2012<6.2.9200.26349

6.2.9200.26349

Microsoft Windows Server 2016<10.0.14393.9512

10.0.14393.9512

Microsoft Windows Server 2012 R2<6.3.9600.23397

6.3.9600.23397

Microsoft Windows 10=1607

10.0.14393.9512

Microsoft Windows 11=26H1

10.0.28000.2954

Microsoft Windows 11=24H2

10.0.26100.9445

Microsoft Windows 11=25H2

10.0.26200.9445

Microsoft Windows 11=23H2

10.0.22631.7582

Microsoft Windows Server 2025<10.0.26100.33438

10.0.26100.33438

Microsoft Windows 11=25H2

10.0.26200.9445

Microsoft Windows 11=23H2

10.0.22631.7582

Microsoft Windows 10=22H2

10.0.19045.7725

Microsoft Windows 10=21H2

10.0.19044.7725

Microsoft Windows 10=21H2

10.0.19044.7725

Microsoft Windows 10=1809

10.0.17763.9245

Microsoft Windows Server 2019<10.0.17763.9245

10.0.17763.9245

Microsoft Windows Server 2019<10.0.17763.9245

10.0.17763.9245

Microsoft Windows Server 2022<10.0.20348.5622

10.0.20348.5622

Microsoft Windows Server 2022<10.0.20348.5622

10.0.20348.5622

Microsoft Windows 10=21H2

10.0.19044.7725

Microsoft Windows 10=1809

10.0.17763.9245

Microsoft Windows 10=1607

10.0.14393.9512

Microsoft Windows 10=22H2

10.0.19045.7725

Microsoft Windows 10=22H2

10.0.19045.7725

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.9512Patch KB5123099
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.23397Patch KB5123066
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.26349Patch KB5123065
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9445Patch KB5124008
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33438Patch KB5122871
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.2954Patch KB5124012
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.9445Patch KB5124008
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.7582Patch KB5122880
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.7725Patch KB5122878
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.7725Patch KB5122878
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.9245Patch KB5122876
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5622Patch KB5122882

Event History

Sep 8, 2026

CVE Published

via Microsoft·02:00 PM

Data Sourced

via Microsoft·02:00 PM

DescriptionSeverityWeaknessAffected Software

Updated

via Microsoft·02:00 PM

Affected Software

Updated

via Microsoft·02:00 PM

Description

CVE Published

via MITRE·05:14 PM

Data Sourced

via MITRE·05:14 PM

DescriptionSeverity

Data Sourced

via NVD·06:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which systems are in scope for this issue?

The affected software list includes Microsoft Windows 10, Windows 11, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, Windows Server 2019, Windows Server 2022, and Windows Server 2025.

What level of access does an attacker need to exploit this vulnerability?

An attacker must already be authorized on the affected system and exploit the issue locally. The vulnerability does not indicate network-based exploitation or required user interaction.

What is the potential impact after successful exploitation?

Successful exploitation allows local elevation of privilege. The supplied vector rates confidentiality, integrity, and availability impact as high.

CVE-2026-69265: Windows NTFS Elevation of Privilege Vulnerability

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

Which systems are in scope for this issue?

What level of access does an attacker need to exploit this vulnerability?

What is the potential impact after successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which systems are in scope for this issue?

What level of access does an attacker need to exploit this vulnerability?

What is the potential impact after successful exploitation?