CVE-2026-59128

Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

EUVD-2026-56309

Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

CVE-2026-59128 Windows Encrypting File System (EFS) Information Disclosure Vulnerability

...

CVE-2026-59128

The CVE-2026-59128 entry documents an out-of-bounds read in Windows Encrypting File System (EFS) that can let an authorized local attacker disclose information. Affected component: Windows EFS. Root cause: out-of-bounds read leading to information disclosure. Impact: local disclosure of informati...

CVE-2026-59128

Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

CVE-2026-59128 Windows Encrypting File System (EFS) Information Disclosure Vulnerability

...

Windows Encrypting File System (EFS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

CVE-2026-59128: Out-of-bounds Read

Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

OPENSUSE-SU-2026:11492-1 aws-efs-utils-3.2.0-1.1 on GA media

These are all security issues fixed in the aws-efs-utils-3.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-76418

These are all security issues fixed in the aws-efs-utils-3.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-70408

Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description An out-of-bounds read in the Windows Encrypting File System EFS allows an authorized attacker to disclose sensitive information locally. Recommendations At the...

CVE-2026-6437 AWS EFS CSI Driver Mount Option Injection

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection. To remediate this issue, users...

CVE-2026-6437

CVE-2026-6437 concerns the AWS EFS CSI Driver (aws-efs-csi-driver) prior to v3.0.1. The flaw is improper neutralization of argument delimiters in the volume handling component, which allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via...

CVE-2026-6437 AWS EFS CSI Driver Mount Option Injection

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection. To remediate this issue, users...

Amazon EFS CSI Driver security vulnerability

The Amazon EFS CSI Driver is an open-source component developed by the Kubernetes SIGs, used for mounting AWS File Storage in Kubernetes clusters. Previous versions of the Amazon EFS CSI Driver, such as 3.0.1, contained security vulnerabilities. These vulnerabilities stemmed from improper paramet...

CVE-2026-6437: Improper Neutralization of Argument Delimiters in a Command

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection. To remediate this issue, users...

CVE-2026-26153: Out-of-bounds Read

Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...

Amazon Linux 2 : amazon-efs-utils, --advisory ALAS2-2026-3245 (ALAS-2026-3245)

The version of amazon-efs-utils installed on the remote host is prior to 3.0.0-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3245 advisory. time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided t...

Amazon Linux 2023 : amazon-efs-utils (ALAS2023-2026-1564)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1564 advisory. time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kargo, rancher-agent, flux-helm-controller, prometheus, secrets-store-csi-driver-provider-azure, aactl, timoni, docker-machine-driver-harvester, kubernetes-dashboard-auth, spire-controller-manager, tkn, policy-controller, seaweedfs, crossplane, terraform-provider-tim...