Physical information disclosure via NTFS buffer over-read

Information disclosure in Windows NTFS in Microsoft Windows and Windows Server allows physically proximate attackers to read memory. Microsoft has disclosed only that NTFS performs a buffer over-read; public records do not identify the code path, the crafted filesystem structure, or the specific memory region read past bounds. Exploitation requires physical access to the device, and the published CVSS and description bound the impact to confidentiality rather than modification or service interruption.