CVE-2026-49790
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
A vulnerability in the Windows Universal Disk Format (UDFS) file system driver allows elevation of privilege. The flaw can be exploited locally by an authenticated attacker to gain higher privileges on the system.
Risk Assessment
The organization faces the risk of privilege escalation by a local user, potentially leading to full system compromise and access to sensitive data.
Recommendation
It is recommended to immediately apply the security update provided by the vendor as part of the monthly cumulative Windows update package.
Other vulnerabilities in Windows UDFS Driver
See all- CVE-2026-50498High
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability.
- CVE-2026-40409High
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability.
- CVE-2026-40404High
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability.
Original NVD description (English source)
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

