CVE-2026-57091
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with limited access can gain full control of the system, leading to data confidentiality and integrity breaches.
Recommendation
Install the latest security updates from Microsoft for Windows File History Service.
Other vulnerabilities in Windows File History Service
See all- CVE-2026-72947Medium
Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-71340High
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-68837High
A use-after-free vulnerability exists in Windows File History Service. This allows an authorized attacker to elevate privileges locally.
- CVE-2021-34455High
Elevation of privilege vulnerability in Windows File History Service. An attacker could exploit it to gain elevated privileges.
Original NVD description (English source)
Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

