Security News > 2021 > April > Microsoft fixes Windows 10 bug that can corrupt NTFS drives
Microsoft has fixed a bug that could allow a threat actor to create specially crafted downloads that crash Windows 10 simply by opening the folder where they are downloaded.
In January, we reported on a new Windows 10 vulnerability discovered by Jonas Lykkegård that allows any user or program, even those with low privileges, to mark an NTFS drive as corrupted simply by accessing the special folder.
In one of our and other people's tests, chkdsk did not fix the issue, and Windows 10 refused to boot again.
In February, Microsoft quietly started testing the fix within Windows Insider builds.
This week, as part of the April 2021 Patch Tuesday, Microsoft has finally fixed the vulnerability in all supported versions of Windows 10.
Microsoft has classified this bug as a DDoS vulnerability and is tracking it as CVE-2021-28312 with the title 'Windows NTFS Denial of Service Vulnerability.
News URL
Related news
- Microsoft: Windows 11 “invites” coming to more Windows 10 Pro PCs (source)
- Microsoft says Windows 10 21H2 support is ending in June (source)
- Microsoft rolls back decision to stop Windows 11 22H2 preview updates (source)
- Windows 10 KB5034843 update released with 9 new changes, fixes (source)
- Microsoft is killing off the Android apps in Windows 11 feature (source)
- Windows 10 KB5001716 update fails with 0x80070643 errors, how to fix (source)
- Windows 10 KB5035845 update released with 9 new changes, fixes (source)
- March 2024 Patch Tuesday: Microsoft fixes critical bugs in Windows Hyper-V (source)
- Microsoft again bothers Chrome users with Bing popup ads in Windows (source)
- Microsoft announces deprecation of 1024-bit RSA keys in Windows (source)
Related Vulnerability
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-04-13 | CVE-2021-28312 | Unspecified vulnerability in Microsoft products Windows NTFS Denial of Service Vulnerability | 3.3 |