CVE-2026-50309

CVE-2026-50309 is a Windows NTFS heap-based buffer overflow that could allow an authorized, local attacker to execute code. Public details consistently describe the vulnerability in Windows NTFS, with the impact stated as local code execution. Microsoft has released updates addressing this vulner...

CVE-2026-50386

CVE-2026-50386 refers to a heap-based buffer overflow in Windows NTFS that allows an unauthorized attacker to execute code locally. The vulnerability affects Windows NTFS components as described in authoritative sources (NVD entry and MSRC update guidance). The exploitation detail in the provided...

CVE-2026-50386 Windows NTFS Remote Code Execution Vulnerability

...

CVE-2026-50412

CVE-2026-50412 is a Windows NTFS elevation-of-privilege vulnerability caused by a stack-based buffer overflow. The affected component is NTFS in Windows, allowing an authorized local attacker with low privileges and no user interaction to gain SYSTEM-level privileges (base CVSS v3.1: 7.8, Local, ...

CVE-2026-50305

CVE-2026-50305 is a Microsoft Brokering File System (Windows) use-after-free vulnerability leading to local privilege escalation for an authenticated user. The available connected data confirms the root cause as a use-after-free in the Brokering File System and a resulting privilege elevation. Ex...

CVE-2026-50305 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2026-50305 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2026-50381

The CVE-2026-50381 entry concerns the Windows Composite Image File System driver (cimfs.sys). A type confusion in this component can lead to local information disclosure by an authenticated user with low privileges (local access, no user interaction required). The CVSS 3.1 base score is 5.5 (Conf...

CVE-2026-50381 Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability

...

CVE-2026-50381 Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability

...

CVE-2026-50318 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

...

CVE-2026-50318 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

...

CVE-2026-50318

CVE-2026-50318 affects the Windows Resilient File System (ReFS). It describes a stack-based buffer overflow that allows an authorized local attacker to elevate privileges. The CVSSv3.1 vector is LOCAL/LOW+LOW/LOW with no user interaction and implies high impact on confidentiality, integrity, and ...

CVE-2026-50308 Windows NTFS Remote Code Execution Vulnerability

...

CVE-2026-50308

CVE-2026-50308 is a Windows NTFS vulnerability described as an integer underflow (wrap or wraparound) that could allow an unauthorized attacker to execute code locally. Sources consistently state: affected component is Windows NTFS on Windows systems; impact is local code execution with high seve...

CVE-2026-49797

CVE-2026-49797 : Heap-based buffer overflow in Windows NTFS enables local code execution by an unauthenticated attacker. Affected component: NTFS. CVSSv3.1: 7.8 (HIGH). Exploitation status is not provided in the available documents; no remediation details are included.

CVE-2026-49793 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

...

CVE-2026-49793 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

...

CVE-2026-49793

CVE-2026-49793 is a heap-based buffer overflow in the Windows Resilient File System (ReFS) that could allow an authorized local attacker to execute code. Affected component: ReFS mechanisms handling memory allocations during I/O; root cause described as a heap-based overflow, enabling code execut...

CVE-2026-49792

CVE-2026-49792 is a Windows ReFS vulnerability due to a numeric truncation error that allows an authorized, local attacker to execute code. Affected component is Windows Resilient File System (ReFS); impact is local code execution with high confidentiality, integrity, and availability impact as p...