CVE-2026-83586
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
A local attacker could bypass authentication mechanisms and gain higher privileges, threatening data on ReFS volumes.
Recommendation
Urgently install Microsoft patches for the ReFS Deduplication Service and restrict access to essential accounts only.
Other vulnerabilities in Windows Resilient File System (ReFS) Deduplication Service
See all- CVE-2025-59210High
A vulnerability in the Windows Resilient File System (ReFS) Deduplication Service allows elevation of privilege. The NVD description provides no further technical details or version range.
- CVE-2025-59206High
A vulnerability in the Windows Resilient File System (ReFS) Deduplication Service allows for elevation of privilege. Technical details are not disclosed in the description.
Original NVD description (English source)
Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS