CVE-2026-85355

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-85328

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-84009

Time-of-check time-of-use toctou race condition in Windows Projected File System allows an authorized attacker to perform tampering locally...

CVE-2026-83881

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally...

CVE-2026-83857

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-83835

Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally...

CVE-2026-83784

Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-83759

Improper control of generation of code 'code injection' in Windows Encrypting File System EFS allows an authorized attacker to execute code over a network...

CVE-2026-83713

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

CVE-2026-83683

Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to disclose information over a network...

CVE-2026-83664

Access of resource using incompatible type 'type confusion' in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally...

CVE-2026-83565

Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

CVE-2026-83513

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-70233

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70143

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally...

CVE-2026-70132

Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70084

Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally...

CVE-2026-70048

Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

CVE-2026-110232

Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored startsWith check. Attackers can supply archive entries like ../x/file to create or overwrite files in sibling folders...

CVE-2026-110233

Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names. Attackers can deliver a file named with shell metacharacters like & alongside a payload, which runs with user privileges when the file is opene...