CVE-2026-50305

CVE-2026-50305 is a Microsoft Brokering File System (Windows) use-after-free vulnerability leading to local privilege escalation for an authenticated user. The available connected data confirms the root cause as a use-after-free in the Brokering File System and a resulting privilege elevation. Ex...

CVE-2026-50305 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2026-50381

Access of resource using incompatible type 'type confusion' in Composite Image File System Driver allows an authorized attacker to disclose information locally...

CVE-2026-50381

The CVE-2026-50381 entry concerns the Windows Composite Image File System driver (cimfs.sys). A type confusion in this component can lead to local information disclosure by an authenticated user with low privileges (local access, no user interaction required). The CVSS 3.1 base score is 5.5 (Conf...

CVE-2026-50381 Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability

...

CVE-2026-50381 Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability

...

CVE-2026-50318

CVE-2026-50318 affects the Windows Resilient File System (ReFS). It describes a stack-based buffer overflow that allows an authorized local attacker to elevate privileges. The CVSSv3.1 vector is LOCAL/LOW+LOW/LOW with no user interaction and implies high impact on confidentiality, integrity, and ...

CVE-2026-50318

Stack-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

CVE-2026-50318 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

...

CVE-2026-50318 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

...

CVE-2026-50308

Integer underflow wrap or wraparound in Windows NTFS allows an unauthorized attacker to execute code locally...

CVE-2026-50308

CVE-2026-50308 is a Windows NTFS vulnerability described as an integer underflow (wrap or wraparound) that could allow an unauthorized attacker to execute code locally. Sources consistently state: affected component is Windows NTFS on Windows systems; impact is local code execution with high seve...

CVE-2026-50308 Windows NTFS Remote Code Execution Vulnerability

...

CVE-2026-49797

CVE-2026-49797 : Heap-based buffer overflow in Windows NTFS enables local code execution by an unauthenticated attacker. Affected component: NTFS. CVSSv3.1: 7.8 (HIGH). Exploitation status is not provided in the available documents; no remediation details are included.

CVE-2026-49793 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

...

CVE-2026-49793 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

...

CVE-2026-49793

CVE-2026-49793 is a heap-based buffer overflow in the Windows Resilient File System (ReFS) that could allow an authorized local attacker to execute code. Affected component: ReFS mechanisms handling memory allocations during I/O; root cause described as a heap-based overflow, enabling code execut...

CVE-2026-49792 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

...

CVE-2026-49792 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

...

CVE-2026-49792

CVE-2026-49792 is a Windows ReFS vulnerability due to a numeric truncation error that allows an authorized, local attacker to execute code. Affected component is Windows Resilient File System (ReFS); impact is local code execution with high confidentiality, integrity, and availability impact as p...