Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2025-49689] Buried in the Log. Exploiting a 20 years old NTFS Vulnerability

swarm.ptsecurity.com | vulnerability | CVE-2025-49689 | #privilege-escalation | #windows | #ntfs | #exploit-development | #cve-2025-49689 | #vhd

Summary

A 20-year-old Windows NTFS flaw (CVE-2025-49689) reachable via a crafted VHD: the log file service bug causes cascading corruptions at mount time and can be exploited for privilege escalation.
Published
Collected

original ↗

Related coverage

  1. Python Software Foundation - Python 3.11.0a3 to 3.15.0b2 (bishopfox.com)
  2. FalconFlank: CrowdStrike Falcon Sensor 0-Day Local Privilege Escalation Exploit (github.com)
  3. CVE-2026-66804 PoC: Windows Cross Device virtual camera local privilege escalation to SYSTEM (github.com)
  4. CVE-2026-50656 PoC: Microsoft Defender RoguePlanet elevation-of-privilege patch bypass (github.com)
  5. CVE-2026-42980 PoC: Windows kernel WMI integer underflow local privilege escalation (github.com)
  6. CVE-2026-24294: Windows SMB local NTLM reflection privilege-escalation PoC (github.com)

back