296803 matches found
CVE-2026-84009
A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Projected File System . This vulnerability allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-367 . No specific exploit details or remediation steps are provided in the doc...
EUVD-2026-99446
Time-of-check time-of-use toctou race condition in Windows Projected File System allows an authorized attacker to perform tampering locally...
EUVD-2026-99424
Weak authentication in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83586
The Windows Resilient File System (ReFS) Deduplication Service is vulnerable to weak authentication (CWE-1390), which allows an authorized attacker to perform a local privilege elevation . The impact includes high risks to confidentiality, integrity, and availability. An official fix is available...
CVE-2026-83848
A vulnerability exists in the Windows COM+ Event System Service due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or versions are provided in the documents, though the issue is confirmed with a HIG...
EUVD-2026-99386
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83784
A vulnerability in the Windows Encrypting File System (EFS) allows an authorized attacker to perform an absolute path traversal attack. This flaw can be exploited over a network to elevate privileges . The CVSS 3.1 score is 8.8 (High) , reflecting high impacts on confidentiality, integrity, and a...
EUVD-2026-99366
Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges over a network...
CVE-2026-83759
A code injection vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to execute arbitrary code over a network. The vulnerability is associated with CWE-94 (Improper Control of Generation of Code). While the documents confirm the existence of ...
EUVD-2026-99359
Improper control of generation of code 'code injection' in Windows Encrypting File System EFS allows an authorized attacker to execute code over a network...
EUVD-2026-99342
Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...
CVE-2026-83713
An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to disclose information locally. The vulnerability is categorized under CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control ...
CVE-2026-70233
A heap-based buffer overflow exists in the Windows Common Log File System Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.8 (HIGH) , reflecting high impact on confidentiality, integrity, and availability. No specific exploit...
EUVD-2026-99195
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-99172
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-70132
A Heap-based buffer overflow exists in the Windows Portable Device File System Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . Official remediation is available via a patch, and the vulnerability is confirmed with a HIGH base severity score of 7.8....
EUVD-2026-99075
Untrusted pointer dereference in Windows Distributed File System DFS allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-105723
The Windows Distributed File System (DFS) component is vulnerable to an untrusted pointer dereference . This flaw allows an unauthorized attacker to achieve privilege escalation remotely over a network. While the specific vulnerable functions or files are not detailed in the provided documents, t...
CVE-2026-102227
A heap-based buffer overflow exists in the Windows Resilient File System (ReFS) . This vulnerability allows an authorized attacker to achieve local code execution . Official remediation is available via Microsoft updates.