CVE-2021-31956

Name of the Vulnerable Software and Affected Versions Windows NTFS (affected versions not specified)

Description An elevation of privilege issue exists in the Windows NTFS driver ntfs.sys due to improper access control and a heap overflow. A heap overflow occurs when a program writes more data to a heap-allocated memory block than it can hold, potentially corrupting adjacent memory. Attackers can abuse this to corrupt adjacent kernel objects and create an arbitrary read/write primitive by shaping the kernel heap, which allows them to steal the SYSTEM token from another process and gain elevated privileges on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.