CVE-2026-72947
MediumCVSS 6.4Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could gain elevated privileges, potentially leading to full system compromise.
Recommendation
Apply the latest Windows security updates to remediate this vulnerability.
Other vulnerabilities in Windows File History Service
See all- CVE-2026-71340High
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-68837High
A use-after-free vulnerability exists in Windows File History Service. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-57091High
Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate privileges locally.
- CVE-2021-34455High
Elevation of privilege vulnerability in Windows File History Service. An attacker could exploit it to gain elevated privileges.
Original NVD description (English source)
Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

