Summary
Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
Details
According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition.
What could an attacker achieve by exploiting this vulnerability?
An attacker could exploit this vulnerability to make unauthorized modifications to protected system data. This could allow the attacker to alter system state or configuration beyond their normal privileges.
According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?
Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.
Security updates
10.0.26200.9445 — https://support.microsoft.com/help/5124008
10.0.22631.7582 — https://support.microsoft.com/help/5122880
10.0.28000.2954 — https://support.microsoft.com/help/5124012
Vulnerabilities 1
-
Medium 4.7
Windows NTFS Tampering Vulnerability
Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to perform tampering locally.
Revision history
-
#1
Information published.
References
-
CVE-2026-69425 Windows NTFS Tampering Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69425
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss