EUVD-2026-56309

Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

CVE-2026-59128 Windows Encrypting File System (EFS) Information Disclosure Vulnerability

...

Windows Encrypting File System (EFS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

PT-2026-70408

Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description An out-of-bounds read in the Windows Encrypting File System EFS allows an authorized attacker to disclose sensitive information locally. Recommendations At the...

PT-2026-76418

These are all security issues fixed in the aws-efs-utils-3.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-59128: Out-of-bounds Read

Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

OPENSUSE-SU-2026:11492-1 aws-efs-utils-3.2.0-1.1 on GA media

These are all security issues fixed in the aws-efs-utils-3.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-6437 AWS EFS CSI Driver Mount Option Injection

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection. To remediate this issue, users...

CVE-2026-6437 AWS EFS CSI Driver Mount Option Injection

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection. To remediate this issue, users...

CVE-2026-6437

CVE-2026-6437 concerns the AWS EFS CSI Driver (aws-efs-csi-driver) prior to v3.0.1. The flaw is improper neutralization of argument delimiters in the volume handling component, which allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via...

Amazon EFS CSI Driver 安全漏洞

The Amazon EFS CSI Driver is an open-source component developed by the Kubernetes SIGs, used for mounting AWS File Storage in Kubernetes clusters. Previous versions of the Amazon EFS CSI Driver, such as 3.0.1, contained security vulnerabilities. These vulnerabilities stemmed from improper paramet...

CVE-2026-6437: Improper Neutralization of Argument Delimiters in a Command

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection. To remediate this issue, users...

CVE-2026-26153: Out-of-bounds Read

Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...

Amazon Linux 2 : amazon-efs-utils, --advisory ALAS2-2026-3245 (ALAS-2026-3245)

The version of amazon-efs-utils installed on the remote host is prior to 3.0.0-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3245 advisory. time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided t...

Amazon Linux 2023 : amazon-efs-utils (ALAS2023-2026-1564)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1564 advisory. time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: spegel, terraform-provider-kubernetes, cri-tools, crossplane-provider-azure-storage, crossplane, falco-no-driver, knative-operator, argo-rollouts, kubernetes-csi-node-driver-registrar, hubble-ui, gcsfuse, kubescape-operator, redpanda, zot, grafana-mimir,...

CVE-2019-20502

An issue was discovered in EFS Easy Chat Server 3.1. There is a buffer overflow via a long body2.ghp message parameter...

GHSA-F9JG-8P32-2F55 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

CVE-2021-25743 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

Amazon Linux 2 : amazon-efs-utils, --advisory ALAS2-2025-3076 (ALAS-2025-3076)

The version of amazon-efs-utils installed on the remote host is prior to 2.4.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3076 advisory. regex is an implementation of regular expressions for the Rust language. The regex crate features built-in...