CVE-2025-59206

HighCVSS 7.4

Published: 14/10/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

Summary

A vulnerability in the Windows Resilient File System (ReFS) Deduplication Service allows for elevation of privilege. Technical details are not disclosed in the description.

Risk Assessment

A local attacker could exploit this vulnerability to gain higher privileges on the system, potentially leading to system compromise.

Recommendation

Apply the latest Microsoft security updates for Windows.

Other vulnerabilities in Windows Resilient File System (ReFS) Deduplication Service

See all

CVE-2026-83586High
Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.
CVE-2025-59210High
A vulnerability in the Windows Resilient File System (ReFS) Deduplication Service allows elevation of privilege. The NVD description provides no further technical details or version range.

Original NVD description (English source)

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS