47 matches found
CVE-2026-88162
Improper authorization in Windows Encrypting File System EFS allows an authorized attacker to perform tampering locally...
CVE-2026-85791
Heap-based buffer overflow in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...
CVE-2026-83784
Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges over a network...
CVE-2026-83759
Improper control of generation of code 'code injection' in Windows Encrypting File System EFS allows an authorized attacker to execute code over a network...
CVE-2026-83683
Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to disclose information over a network...
CVE-2026-83565
Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
CVE-2026-83683
A vulnerability in Windows Encrypting File System (EFS) allows an authorized attacker to perform an absolute path traversal to disclose information over a network. The impact is categorized as high confidentiality impact with a CVSS 3.1 base score of 6.5 . While specific exploit details are not p...
CVE-2026-83565
A buffer over-read vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability is associated with CWE-126 . While the documents confirm the existence o...
CVE-2026-88162
A vulnerability exists in the Windows Encrypting File System (EFS) due to improper authorization (CWE-863 ). This flaw allows an authorized attacker to perform local tampering . The vulnerability has been confirmed by Microsoft with a base score of 5.5 and an official fix is available. No specifi...
CVE-2026-85791
A heap-based buffer overflow vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to perform a local elevation of privilege . While the documents confirm the vulnerability type and potential impact, specific details regarding the affected comp...
CVE-2026-83784
A vulnerability in the Windows Encrypting File System (EFS) allows an authorized attacker to perform an absolute path traversal attack. This flaw can be exploited over a network to elevate privileges . The CVSS 3.1 score is 8.8 (High) , reflecting high impacts on confidentiality, integrity, and a...
CVE-2026-83759
A code injection vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to execute arbitrary code over a network. The vulnerability is associated with CWE-94 (Improper Control of Generation of Code). While the documents confirm the existence of ...
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
Improper control of generation of code 'code injection' in Windows Encrypting File System EFS allows an authorized attacker to execute code over a network...
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges over a network...
Windows Encrypting File System (EFS) Tampering Vulnerability
Improper authorization in Windows Encrypting File System EFS allows an authorized attacker to perform tampering locally...
Windows Encrypting File System (EFS) Information Disclosure Vulnerability
Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to disclose information over a network...
Windows Encrypting File System (EFS) Information Disclosure Vulnerability
Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-83759: Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
Improper control of generation of code 'code injection' in Windows Encrypting File System EFS allows an authorized attacker to execute code over a network...
PT-2026-112972
Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description Improper authorization in the Windows Encrypting File System EFS allows an authorized attacker to perform local tampering, which can affect the system...