CVE-2025-62456
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk65th percentile - higher than 65% of all known CVEs
Summary
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code over a network.
Risk Assessment
The vulnerability allows an authorized attacker to execute code remotely over a network, potentially leading to system compromise.
Recommendation
Apply the available Microsoft security updates for Windows Resilient File System (ReFS).
Other vulnerabilities in Windows Resilient File System (ReFS)
See all- CVE-2026-69617High
Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-50501High
In Windows Resilient File System (ReFS), a stack-based buffer overflow vulnerability allows an unauthorized attacker to execute code locally.
- CVE-2026-50492Medium
A heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code via a physical attack.
- CVE-2026-50441High
Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-50407High
A heap-based buffer overflow in the Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-50362High
A heap-based buffer overflow vulnerability in the Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.
- CVE-2026-50357High
A numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. The vulnerability stems from improper handling of numeric values during file system operations.
- CVE-2026-54109High
Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
- CVE-2026-50318High
A stack-based buffer overflow in the Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-49793High
A heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS