CVE-2026-83759
HighCVSS 8.8Summary
Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.
Risk Assessment
An authorized attacker could remotely execute code, potentially leading to system and data integrity compromise.
Recommendation
Apply Windows security updates and restrict access to EFS.
Other vulnerabilities in Windows Encrypting File System (EFS)
See all- CVE-2026-85791High
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-83784High
An absolute path traversal vulnerability in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69841High
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-69794Medium
A buffer over-read vulnerability in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS