---
id: 5092
title: "[CVE-2025-49689] Buried in the Log. Exploiting a 20 years old NTFS Vulnerability"
cve: CVE-2025-49689
source_domain: swarm.ptsecurity.com
source_url: "https://swarm.ptsecurity.com/buried-in-the-log-exploiting-a-20-years-old-ntfs-vulnerability/"
published_at: "2025-07-09T14:05:31Z"
tags: ["privilege-escalation", "windows", "ntfs", "exploit-development", "cve-2025-49689", "vhd"]
phying_url: "https://phying.com/item/5092"
lang: en
---

# [CVE-2025-49689] Buried in the Log. Exploiting a 20 years old NTFS Vulnerability

## Summary

A 20-year-old Windows NTFS flaw (CVE-2025-49689) reachable via a crafted VHD: the log file service bug causes cascading corruptions at mount time and can be exploited for privilege escalation.

## Intelligence Metadata

- **Sources:** swarm.ptsecurity.com
- **CVE:** CVE-2025-49689
- **Published:** 2025-07-09T14:05:31Z
- **Original:** https://swarm.ptsecurity.com/buried-in-the-log-exploiting-a-20-years-old-ntfs-vulnerability/
- **Phying News:** https://phying.com/item/5092