EUVD-2026-99532

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-99530

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

EUVD-2026-99529

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-85823

A Use after free vulnerability in the Windows Composite Image File System allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.0 (High) . While the documentation confirms the existence of an official fix, specific details r...

CVE-2026-85798

A heap-based buffer overflow exists in the Windows Distributed File System (DFS) . This vulnerability allows an authorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 7.2, reflecting high impact on confidentiality, integrity, and availability. No specific explo...

EUVD-2026-99510

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...

CVE-2026-85791

A heap-based buffer overflow vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to perform a local elevation of privilege . While the documents confirm the vulnerability type and potential impact, specific details regarding the affected comp...

EUVD-2026-99503

Heap-based buffer overflow in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...

CVE-2026-85355

The Windows Common Log File System Driver is vulnerable to an elevation of privilege flaw due to the inclusion of functionality from an untrusted control sphere (CWE-829 ). An authorized attacker can exploit this issue to gain higher privileges locally. The vulnerability has been assigned a HIGH ...

EUVD-2026-99481

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-85328

A weak authentication vulnerability exists in the Windows Projected File System . This flaw allows an authorized attacker to perform a local privilege elevation . No specific software versions, root causes, or remediation steps are provided in the documents beyond the existence of an official fix...

EUVD-2026-99467

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...

EUVD-2026-99446

Time-of-check time-of-use toctou race condition in Windows Projected File System allows an authorized attacker to perform tampering locally...

CVE-2026-84009

A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Projected File System . This vulnerability allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-367 . No specific exploit details or remediation steps are provided in the doc...

CVE-2026-83586

The Windows Resilient File System (ReFS) Deduplication Service is vulnerable to weak authentication (CWE-1390), which allows an authorized attacker to perform a local privilege elevation . The impact includes high risks to confidentiality, integrity, and availability. An official fix is available...

EUVD-2026-99424

Weak authentication in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83848

A vulnerability exists in the Windows COM+ Event System Service due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or versions are provided in the documents, though the issue is confirmed with a HIG...

EUVD-2026-99386

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-99366

Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-83784

A vulnerability in the Windows Encrypting File System (EFS) allows an authorized attacker to perform an absolute path traversal attack. This flaw can be exploited over a network to elevate privileges . The CVSS 3.1 score is 8.8 (High) , reflecting high impacts on confidentiality, integrity, and a...