CVE-2026-83565
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
A buffer over-read vulnerability exists in Windows Encrypting File System (EFS). An authorized attacker can exploit this to disclose information locally.
Risk Assessment
An attacker could read data beyond the intended buffer, potentially leading to leakage of confidential information from the file system.
Recommendation
Install patches for Windows EFS and monitor access to encrypted files.
Other vulnerabilities in Windows Encrypting File System (EFS)
See all- CVE-2026-88162Medium
Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.
- CVE-2026-85791High
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-83784High
An absolute path traversal vulnerability in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
- CVE-2026-83759High
Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.
- CVE-2026-83683Medium
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.
- CVE-2026-69841High
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-69794Medium
A buffer over-read vulnerability in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS