CVE-2026-50381

Access of resource using incompatible type 'type confusion' in Composite Image File System Driver allows an authorized attacker to disclose information locally...

CVE-2026-50381 Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability

...

PT-2026-58204

Name of the Vulnerable Software and Affected Versions Composite Image File System Driver affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an authorized attacker to disclose sensitive information locally a...

CVE-2026-50381: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Composite Image File System Driver allows an authorized attacker to disclose information locally...

CVE-2024-26170 Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability

...

PT-2024-2250 · Microsoft · Windows Composite Image File System +1

Name of the Vulnerable Software and Affected Versions: Windows Composite Image File System CimFS affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Composite Image File System CimFS component, which can be exploited to elevate...

CVE-2024-26170: Improper Input Validation

Windows Composite Image File System CimFS Elevation of Privilege Vulnerability...

Microsoft Windows Composite Image File System security vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Composite Image File System. The following products and versions are affected: Windows Server 2022,Windows Server 2022 Server Core...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Circumvention of security measure Remote code execution User rights...