Microsoft fixes Windows 10's drive corrupting NTFS denial of service vulnerability
In the middle of January, we reported about a vulnerability in Windows 10 that could be used to corrupt the contents of an NTFS formatted drive. A specially crafted folder name was all that was needed to cause a volume to be marked as dirty, and then require a fix with the Chkdsk utility.
But Chkdsk did not always do the trick, leaving victims with unbootable systems. A couple of months ago, Microsoft started testing a fix with Windows Insiders and now the patch is being made available to everyone. It addresses the problems which was being tracked as CVE-2021-28312 (Windows NTFS Denial of Service Vulnerability).
Microsoft patches serious NTFS drive corruption flaw in Windows 10... but there's a catch
Around a month and a half ago we reported about a serious flaw in Windows 10 that could be exploited to corrupt the contents of an NTFS drive. With Microsoft dawdling in its response, it was down to security researchers from OSR to produce a third-party patch.
But now Microsoft has stepped up to the plate and, finally, come up with an official fix for the flaw. Sadly, it's not all good news as the fix is not currently available for everyone.
Security researchers develop unofficial patch for drive-corrupting Windows 10 NTFS bug
A couple of week ago, we reported about a critical NTFS vulnerability that left hard drives open to corruption in Windows 10. Security researcher Jonas Lykkegaard revealed that opening a folder with a specially crafted name could wipe out the contents of a drive in an instant.
Microsoft is yet to produce a fix for the problem, but that doesn't mean no one else has. Third party patch-makers such as 0patch have already made names for themselves stepping in to produce updates either for unsupported versions of Windows, or simply beating Microsoft to the punch. Now it is the turn of developers from OSR who have released an unofficial workaround patch for the NTFS flaw.