CVE-2026-20840 | Microsoft Windows up to Server 2025 NTFS heap-based overflow

January 13, 2026 Yanac

A vulnerability classified as critical was found in Microsoft Windows. Impacted is an unknown function of the component NTFS. Executing a manipulation can lead to heap-based buffer overflow.

The identification of this vulnerability is CVE-2026-20840. The attack can only be executed locally. There is no exploit available.

It is best practice to apply a patch to resolve this issue.VulDB Recent EntriesRead More