CVE-2026-69841
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
Risk Assessment
A local attacker could exploit this vulnerability to gain higher privileges, potentially leading to data confidentiality breaches.
Recommendation
Install Windows security updates and monitor EFS-related activities.
Other vulnerabilities in Windows Encrypting File System (EFS)
See all- CVE-2026-85791High
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-83784High
An absolute path traversal vulnerability in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
- CVE-2026-83759High
Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.
- CVE-2026-69794Medium
A buffer over-read vulnerability in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS