CVE-2026-83586

The Windows Resilient File System (ReFS) Deduplication Service is vulnerable to weak authentication (CWE-1390), which allows an authorized attacker to perform a local privilege elevation . The impact includes high risks to confidentiality, integrity, and availability. An official fix is available...

EUVD-2026-99386

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83848

A vulnerability exists in the Windows COM+ Event System Service due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or versions are provided in the documents, though the issue is confirmed with a HIG...

EUVD-2026-99366

Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-83784

A vulnerability in the Windows Encrypting File System (EFS) allows an authorized attacker to perform an absolute path traversal attack. This flaw can be exploited over a network to elevate privileges . The CVSS 3.1 score is 8.8 (High) , reflecting high impacts on confidentiality, integrity, and a...

EUVD-2026-99359

Improper control of generation of code 'code injection' in Windows Encrypting File System EFS allows an authorized attacker to execute code over a network...

CVE-2026-83759

A code injection vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to execute arbitrary code over a network. The vulnerability is associated with CWE-94 (Improper Control of Generation of Code). While the documents confirm the existence of ...

EUVD-2026-99342

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

CVE-2026-83713

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to disclose information locally. The vulnerability is categorized under CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control ...

EUVD-2026-99195

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70233

A heap-based buffer overflow exists in the Windows Common Log File System Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.8 (HIGH) , reflecting high impact on confidentiality, integrity, and availability. No specific exploit...

EUVD-2026-99172

Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70132

A Heap-based buffer overflow exists in the Windows Portable Device File System Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . Official remediation is available via a patch, and the vulnerability is confirmed with a HIGH base severity score of 7.8....

EUVD-2026-99075

Untrusted pointer dereference in Windows Distributed File System DFS allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-105723

The Windows Distributed File System (DFS) component is vulnerable to an untrusted pointer dereference . This flaw allows an unauthorized attacker to achieve privilege escalation remotely over a network. While the specific vulnerable functions or files are not detailed in the provided documents, t...

EUVD-2026-99034

Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

CVE-2026-102227

A heap-based buffer overflow exists in the Windows Resilient File System (ReFS) . This vulnerability allows an authorized attacker to achieve local code execution . Official remediation is available via Microsoft updates.

Vulnerabilities in Microsoft System Center

Microsoft has identified vulnerabilities in Configuration Manager and Defender. A local malicious individual could exploit these vulnerabilities to gain elevated privileges and potentially access sensitive data. Microsoft Configuration Manager:...

Malware in opencode2-linux-arm64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-17856 Malicious code in opencode2-linux-arm64-musl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29d77295b1fca10788c9203f4cddd81390c2257ed49c9f260838bf5c383bab8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...