Lucene search
+L

8 matches found

NVD
NVD
added 2026/07/14 5:17 p.m.10 views

CVE-2026-50381

Access of resource using incompatible type 'type confusion' in Composite Image File System Driver allows an authorized attacker to disclose information locally...

5.5CVSS0.00285EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/14 5:6 p.m.35 views

CVE-2026-50381

The CVE-2026-50381 entry concerns the Windows Composite Image File System driver (cimfs.sys). A type confusion in this component can lead to local information disclosure by an authenticated user with low privileges (local access, no user interaction required). The CVSS 3.1 base score is 5.5 (Conf...

5.5CVSS6AI score0.00285EPSS
SaveExploits0References1Affected Software7
Vulnrichment
Vulnrichment
added 2026/07/14 5:6 p.m.9 views

CVE-2026-50381 Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability

...

5.5CVSS6.1AI score0.00285EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/14 5:6 p.m.41 views

CVE-2026-50381 Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability

...

5.5CVSS0.00285EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/12 4:58 p.m.47 views

CVE-2024-26170 Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability

...

7.8CVSS8.4AI score0.06647EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/12 12:0 a.m.5 views

PT-2024-2250 · Microsoft · Windows Composite Image File System +1

Name of the Vulnerable Software and Affected Versions: Windows Composite Image File System CimFS affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Composite Image File System CimFS component, which can be exploited to elevate...

7.8CVSS7.9AI score0.06647EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2024/03/12 12:0 a.m.11 views

Microsoft Windows Composite Image File System security vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Composite Image File System. The following products and versions are affected: Windows Server 2022,Windows Server 2022 Server Core...

7.8CVSS6.7AI score0.06647EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
added 2022/06/08 7:0 a.m.4 views

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.

...

7.8CVSS7.3AI score0.00436EPSS
SaveExploits0
Rows per page
Query Builder