CVE-2026-69794
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
A buffer over-read vulnerability in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
Risk Assessment
The risk involves potential disclosure of data from memory buffer, which could lead to leakage of sensitive information stored in encrypted files.
Recommendation
It is recommended to apply Windows security updates.
Other vulnerabilities in Windows Encrypting File System (EFS)
See all- CVE-2026-85791High
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-83784High
An absolute path traversal vulnerability in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
- CVE-2026-83759High
Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.
- CVE-2026-69841High
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS